Spring Boot控制台密码

Question

我使用Spring Boot，我已经读到应该在日志文件或控制台打印出默认值--但我的日志中没有任何内容。我使用putty连接，连接是找到的，但我不知道凭据（密码）。为了让它工作，我能做什么提示吗？

[编辑]我还将其添加到Application.Properties文件的行中：

security.user.name=user
security.user.password=secret

但毫无效果。

<dependencies>
    <dependency>
        <groupId>org.springframework.boot</groupId>
        <artifactId>spring-boot-starter-aop</artifactId>
    </dependency>
    <dependency>
        <groupId>org.springframework.boot</groupId>
        <artifactId>spring-boot-starter-security</artifactId>
    </dependency> 
    <dependency>
        <groupId>org.springframework.boot</groupId>
        <artifactId>spring-boot-starter-web</artifactId>
    </dependency>
    <dependency>
        <groupId>org.springframework.boot</groupId>
        <artifactId>spring-boot-starter-websocket</artifactId>
    </dependency>           
    <dependency>
        <groupId>org.springframework.boot</groupId>
        <artifactId>spring-boot-starter-test</artifactId>
        <scope>test</scope>
    </dependency>
    <dependency>
        <groupId>com.smartinnotec.accounting</groupId>
        <artifactId>smartinnotec-accounting-frontend</artifactId>
    </dependency>
    <dependency>
        <groupId>org.scala-lang</groupId>
        <artifactId>scala-library</artifactId>
        <version>2.10.4</version>
    </dependency>
</dependencies>

@Configuration
@EnableWebSecurity
public class WebSecurityConfig extends WebSecurityConfigurerAdapter {

private static final String[] restEndpointsToSecure;
@Autowired
private XAuthTokenConfigurer xAuthTokenConfigurer;

static {
    restEndpointsToSecure = new String[7];
    ...
}

@Autowired(required = true)
private UserService userService;

public WebSecurityConfig() {
}

@Override
protected void configure(final HttpSecurity http) throws Exception {

    final String[] restEndpointsToSecure = WebSecurityConfig.restEndpointsToSecure;
    for (final String endpoint : restEndpointsToSecure) {
        http.authorizeRequests().antMatchers("/" + endpoint + "/**").hasRole(UserRoleEnum.USER.toString());
    }

    http.csrf().disable();
    http.sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS);
    http.addFilterAfter(csrfTokenResponseHeaderBindingFilter(), CsrfFilter.class);

    xAuthTokenConfigurer.setDetailsService(userDetailsServiceBean());
    final SecurityConfigurer<DefaultSecurityFilterChain, HttpSecurity> securityConfigurerAdapter = xAuthTokenConfigurer;
    http.apply(securityConfigurerAdapter);
}

@Override
protected void configure(final AuthenticationManagerBuilder authManagerBuilder) throws Exception {
    authManagerBuilder.userDetailsService(new CustomUserDetailsService(userService));
}

@Bean
public CsrfTokenResponseHeaderBindingFilter csrfTokenResponseHeaderBindingFilter() {
    return new CsrfTokenResponseHeaderBindingFilter();
}

@Bean
@Override
public UserDetailsService userDetailsServiceBean() throws Exception {
    return super.userDetailsServiceBean();
}

@Bean
@Override
public AuthenticationManager authenticationManagerBean() throws Exception {
    return super.authenticationManagerBean();
}

@Override
public String toString() {
    return "[WebSecurityConfig]";
}
}

Answer 1

如果将“Spring Security”添加到项目中，所有通过HTTP公开的敏感endpoint都将受到保护。默认情况下，“基本”身份验证将与用户名用户和生成的密码一起使用（当应用程序启动时，密码将打印在控制台上），就像

使用默认安全密码:78FA095D-3F4C-48B1-AD50-E24C31D5CF35

然后你可以你这个密码登录。