<parent>
        <groupId>org.springframework.boot</groupId>
        <artifactId>spring-boot-starter-parent</artifactId>
        <version>2.2.10.RELEASE</version>
        <relativePath/> <!-- lookup parent from repository -->
    </parent>

<dependency>
        <groupId>org.springframework.boot</groupId>
        <artifactId>spring-boot-starter-web</artifactId>
    </dependency>

    <!--這里由于我的springboot版本是2.2.10.RELEASE，所以 springboot admin 也要用2.2.x版-->
    <dependency>
        <groupId>de.codecentric</groupId>
        <artifactId>spring-boot-admin-starter-server</artifactId>
        <version>2.2.4</version>
    </dependency>

# 指定端口
server:
	port: 23333

 package com.zcode.monitor.server;
    import de.codecentric.boot.admin.server.config.EnableAdminServer;
    import org.springframework.boot.SpringApplication;
    import org.springframework.boot.autoconfigure.SpringBootApplication;
    /**
     * AdminServerApplication
     * @author ZENG.XIAO.YAN
     * @version 1.0
     * @Date 2020-11-12
     */
    @EnableAdminServer // 開(kāi)啟 springboot admin 服務(wù)端
    @SpringBootApplication
    public class AdminServerApplication {

        public static void main(String[] args) {
            SpringApplication.run(AdminServerApplication.class,args);
        }
    }

<parent>
        <groupId>org.springframework.boot</groupId>
        <artifactId>spring-boot-starter-parent</artifactId>
        <version>2.2.10.RELEASE</version>
        <relativePath/> <!-- lookup parent from repository -->
    </parent>

   <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-starter-web</artifactId>
        </dependency>

        <!--這里由于我的springboot版本是2.2.10.RELEASE，所以 springboot admin 也要用2.2.x版-->
        <dependency>
            <groupId>de.codecentric</groupId>
            <artifactId>spring-boot-admin-starter-client</artifactId>
            <version>2.2.4</version>
        </dependency>

# 端口
server:
  port: 9088


#開(kāi)放端點(diǎn)用于SpringBoot Admin的監(jiān)控
management:
  endpoints:
    web:
      exposure:
        include: '*'

spring:
  application:
    name: admin-client # 給client應(yīng)用取個(gè)名字

  boot:
    admin:
      client:
        url:  http://localhost:23333   #這里配置admin server 的地址

logging:
  file:
    name: admin-client.log  #配置生成日志文件名稱(chēng)

  /**
     * HelloController
     *
     * @author ZENG.XIAO.YAN
     * @version 1.0
     * @Date 2020-11-16
     */
    @Slf4j
    @RestController
    @RequestMapping("api")
    public class HelloController {
        private AtomicInteger count = new AtomicInteger(0);

        @GetMapping("hi")
        private String sayHi() {
            // 每次進(jìn)來(lái)如打印下日志
            log.info("{} 啪...我第{}次進(jìn)來(lái)了.", LocalDateTime.now(),  count.addAndGet(1));
            // 每次進(jìn)來(lái)new 個(gè)大對(duì)象，便于監(jiān)控觀察堆內(nèi)存變化
            byte[] bytes = new byte[100*1024*1024];
            log.info("new了 100MB");
            return "hi springboot addmin " + LocalDateTime.now();
        }
    }

@SpringBootApplication
public class AdminClientApplication {

    public static void main(String[] args) {
        SpringApplication.run(AdminClientApplication.class, args);
    }
}

  <!--springboot admin 安全相關(guān)-->
        <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-starter-security</artifactId>
        </dependency>

# 配置一個(gè)賬號(hào)和密碼
spring:
  security:
    user:
      name: admin
      password: root123456

 @Configuration
    public class SecuritySecureConfig extends WebSecurityConfigurerAdapter {
        private final String adminContextPath;

        public SecuritySecureConfig(AdminServerProperties adminServerProperties) {
            this.adminContextPath = adminServerProperties.getContextPath();
        }

        @Override
        protected void configure(HttpSecurity http) throws Exception {
            SavedRequestAwareAuthenticationSuccessHandler successHandler = new SavedRequestAwareAuthenticationSuccessHandler();
            successHandler.setTargetUrlParameter("redirectTo");
            successHandler.setDefaultTargetUrl(adminContextPath + "/");
            http.authorizeRequests()
                    //1.配置所有靜態(tài)資源和登錄頁(yè)可以公開(kāi)訪問(wèn)
                    .antMatchers(adminContextPath + "/assets/**").permitAll()
                    .antMatchers(adminContextPath + "/login").permitAll()
                    .anyRequest().authenticated()
                    .and()
                    //2.配置登錄和登出路徑
                    .formLogin().loginPage(adminContextPath + "/login").successHandler(successHandler).and()
                    .logout().logoutUrl(adminContextPath + "/logout").and()
                    //3.開(kāi)啟http basic支持，admin-client注冊(cè)時(shí)需要使用
                    .httpBasic().and()
                    .csrf()
                    //4.開(kāi)啟基于cookie的csrf保護(hù)
                    .csrfTokenRepository(CookieCsrfTokenRepository.withHttpOnlyFalse())
                    //5.忽略這些路徑的csrf保護(hù)以便admin-client注冊(cè)
                    .ignoringAntMatchers(
                            adminContextPath + "/instances",
                            adminContextPath + "/actuator/**"
                    );
        }
    }

spring:
  application:
    name: admin-client # 給client應(yīng)用取個(gè)名字

  boot:
    admin:
      client:
        url:  http://localhost:23333 #這里配置admin server 的地址
        # 配置 admin-server的賬號(hào)和密碼
        username: admin 
        password: root123456

   <!--spring security-->
        <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-starter-security</artifactId>
        </dependency>

spring:
  application:
    name: admin-client # 給client應(yīng)用取個(gè)名字

  boot:
    admin:
      client:
        url:  http://localhost:23333 #這里配置admin server 的地址
        # 配置 admin-server的賬號(hào)和密碼
        username: admin
        password: root123456
        instance:
          metadata:
            # 這里配置admin-client的賬號(hào)和密碼
            user.name: ${spring.security.user.name}
            user.password: ${spring.security.user.password}

  # admin-client 的用戶名和密碼
  security:
    user:
      name: clientAdmin
      password: 123456

  @Configuration
    @Slf4j
    public class SpringSecurityActuatorConfig extends WebSecurityConfigurerAdapter {

        public SpringSecurityActuatorConfig() {
            log.info("SpringSecurityActuatorConfig... start");
        }

        @Override
        protected void configure(HttpSecurity http) throws Exception {
            //  這個(gè)配置只針對(duì)  /actuator/** 的請(qǐng)求生效
            http.antMatcher("/actuator/**")
                    // /actuator/下所有請(qǐng)求都要認(rèn)證
                    .authorizeRequests().anyRequest().authenticated()
                    // 啟用httpBasic認(rèn)證模式，當(dāng)springboot admin-client 配置了密碼時(shí)，
                    // admin-server走h(yuǎn)ttpbasic的認(rèn)證方式來(lái)拉取client的信息
                    .and().httpBasic()
                    // 禁用csrf
                    .and().csrf().disable();

        }
    }

/**
 * SpringSecurity 表單和HttpBasic 共存配置參考，寫(xiě)在一個(gè)類(lèi)里面方便對(duì)比
 * @author ZENG.XIAO.YAN
 * @Date 2020-11-11
 * @version 1.0
 */
@Slf4j
public class SpringSecurityConfig2 {

    /*
     * 這個(gè)表單和HttpBasic 共存配置玩法，參考url如下：
     *  官方url：https://docs.spring.io/spring-security/site/docs/4.2.3.BUILD-SNAPSHOT/reference/htmlsingle/#multiple-httpsecurity
     *  項(xiàng)目啟動(dòng)日志如下,可以看到創(chuàng)建了2條過(guò)濾鏈
	 * 2020-11-11 22:57:56.340  INFO 12692 --- [main] o.s.s.web.DefaultSecurityFilterChain: Creating filter chain: Ant [pattern='/actuator/**'],
	 * 2020-11-11 22:57:56.344  INFO 12692 --- [main] o.s.s.web.DefaultSecurityFilterChain: Creating filter chain: any request,
     */


    /**
     * HttpBasic 認(rèn)證方式，只對(duì)/actuator/** 生效，由于設(shè)置了Order，優(yōu)先級(jí)會(huì)高于FormLoginWebSecurityConfigurerAdapter
     * @author ZENG.XIAO.YAN
     * @Date 2020-11-11
     * @version 1.0
     */
    @Configuration
    @Order(1)
    public static class HttpBasicSecurityConfigurationAdapter extends WebSecurityConfigurerAdapter {

        public HttpBasicSecurityConfigurationAdapter() {
            log.info("HttpBasicSecurityConfigurationAdapter... start");
        }

        protected void configure(HttpSecurity http) throws Exception {
            //  這個(gè)配置只針對(duì)  /actuator/** 的請(qǐng)求生效
            http.antMatcher("/actuator/**")
                    // /actuator/下所有請(qǐng)求都要認(rèn)證
                    .authorizeRequests().anyRequest().authenticated()
                    // 啟用httpBasic認(rèn)證模式，當(dāng)springboot admin-client 配置了密碼時(shí)，
                    // admin-server走h(yuǎn)ttpbasic的認(rèn)證方式來(lái)拉取client的信息
                    .and().httpBasic()
                    // 禁用csrf
                    .and().csrf().disable();
        }
    }

    /**
     * 表單登錄認(rèn)證方式配置，由于沒(méi)有指定Order，所以默認(rèn)是最大2147483647，數(shù)值越大，優(yōu)先級(jí)越低
     * @author ZENG.XIAO.YAN
     * @Date 2020-11-11
     * @version 1.0
     */
    @Configuration
    public static class FormLoginWebSecurityConfigurerAdapter extends WebSecurityConfigurerAdapter {
        
        public FormLoginWebSecurityConfigurerAdapter() {
            log.info("FormLoginWebSecurityConfigurerAdapter... start");
        }

        @Override
        protected void configure(HttpSecurity http) throws Exception {
            http.authorizeRequests()
                .anyRequest().authenticated()
                .and()
                .formLogin();
        }
    }

}