关于BladeX 2.8.2 整合单点登录功能的问题

Blade 未结 1 1182
E-ER
E-ER 剑圣 2022-09-01 17:46

一、该问题的重现步骤是什么?

1. 目前生产使用的是baldeX 2.8.2

2. 根据七月份新版本发布的单点登录提交记录,将单点登录功能整合到了项目中

image.png


3.现在有一个问题是,在BladeRsourceServerConfiguration类中,将注解@EnableResourceServer去掉,单点登录才能找到/oauth/form方法,不去掉这个注解会报错/oauth/form 404,但是如果去掉这个注解,登出时会在浏览器弹出一个alert框要求输入用户名和密码


image.png


4. 点击取消之后能够退出登录,但是会报一个401


image.png


看gateway日志,后台退出方法已经走完了,auth服务却没有收到请求,并且没有任何异常,没有头绪理解是什么问题

image.png

image.png

二、你期待的结果是什么?实际看到的又是什么?


三、你正在使用的是什么产品,什么版本?在什么操作系统上?

BladeX 2.8.2 Win10

四、请提供详细的错误堆栈信息,这很重要。


================ Gateway Request Start  ================

===> GET: /blade-auth/oauth/logout

===Headers===  x-forwarded-host: localhost:8081

===Headers===  x-forwarded-proto: http

===Headers===  x-forwarded-port: 8081

===Headers===  x-forwarded-for: 127.0.0.1

===Headers===  cookie: jenkins-timestamper-offset=-28800000; jenkins-timestamper=system; jenkins-timestamper-local=true; JSESSIONID=7CA5DF34C03675372660D4E7A05C59E1; saber-access-token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.Z809GxffLyG72z6dMwemm73rJWsOgxoGuby-ZRsvdTk; saber-refresh-token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0ZW5hbnRfaWQiOiIwMDAwMDAiLCJ1c2VyX25hbWUiOiJhZG1pbiIsInJlYWxfbmFtZSI6IueuoeeQhuWRmCIsImF2YXRhciI6Imh0dHBzOi8vZ3cuYWxpcGF5b2JqZWN0cy5jb20vem9zL3Jtc3BvcnRhbC9CaWF6ZmFueG1hbU5Sb3h4VnhrYS5wbmciLCJhdXRob3JpdGllcyI6WyJhZG1pbmlzdHJhdG9yIl0sImNsaWVudF9pZCI6InNhYmVyIiwicm9sZV9uYW1lIjoiYWRtaW5pc3RyYXRvciIsImxpY2Vuc2UiOiJwb3dlcmVkIGJ5IGVlciIsInBvc3RfaWQiOiIxIiwidXNlcl9jYXRlZ29yeSI6bnVsbCwidXNlcl9pZCI6IjEiLCJyb2xlX2lkIjoiMSIsInBob25lIjoiMTIzMzMzMzMzMzMzIiwic2NvcGUiOlsiYWxsIl0sIm5pY2tfbmFtZSI6IueuoeeQhuWRmCIsImF0aSI6ImNhMDllYTgxLTJkYzctNGFmYy1iNjM0LTBmYjkxMjQwMDczZiIsIm9hdXRoX2lkIjoiIiwiZGV0YWlsIjp7InR5cGUiOiJ3ZWIifSwiZXhwIjoxNjYyNjI5NjY5LCJkZXB0X2lkIjoiMSIsImp0aSI6IjI2NWRkOWFkLTU2Y2UtNGRjZS05ZWQwLWU2MzQxODAzNDVmNiIsImFjY291bnQiOiJhZG1pbiIsImVtYWlsIjoiYWRtaW5AYmxhZGV4LnZpcCJ9.rcRv3vDkqRFJl2Pvj2ydWSgmCuzKShAb5TyuHMhRlM4

===Headers===  accept-language: zh,zh-CN;q=0.9,en-US;q=0.8,en;q=0.7

===Headers===  accept-encoding: gzip, deflate, br

===Headers===  referer: http://localhost:8081/

===Headers===  sec-fetch-dest: empty

===Headers===  sec-fetch-mode: cors

===Headers===  sec-fetch-site: same-origin

===Headers===  sec-ch-ua-platform: "Windows"

===Headers===  current-language: zh_CN

===Headers===  user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36

===Headers===  accept: application/json, text/plain, */*

===Headers===  blade-auth: {tenant_id=000000, user_name=admin, real_name=管理员, avatar=https://gw.alipayobjects.com/zos/rmsportal/BiazfanxmamNRoxxVxka.png, authorities=[administrator], client_id=saber, role_name=administrator, license=powered by bladex, post_id=1, user_id=1, role_id=1, phone=123333333333, scope=[all], nick_name=管理员, oauth_id=, detail={type=web}, exp=1662028469, dept_id=1, jti=ca09ea81-2dc7-4afc-b634-0fb91240073f, account=admin, email=admin@bladex.cn}

===Headers===  blade-auth-original: bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0ZW5hbnRfaWQiOiIwMDAwMDAiLCJ1c2VyX25hbWUiOiJhZG1pbiIsInJlYWxfbmFtZSI6IueuoeeQhuWRmCIsImF2YXRhciI6Imh0dHBzOi8vZ3cuYWxpcGF5b2JqZWN0cy5jb20vem9zL3Jtc3BvcnRhbC9CaWF6ZmFueG1hbU5Sb3h4VnhrYS5wbmciLCJhdXRob3JpdGllcyI6WyJhZG1pbmlzdHJhdG9yIl0sImNsaWVudF9pZCI6InNhYmVyIiwicm9sZV9uYW1lIjoiYWRtaW5pc3RyYXRvciIsImxpY2Vuc2UiOiJwb3dlcmVkIGJ5IGVlciIsInBvc3RfaWQiOiIxIiwidXNlcl9jYXRlZ29yeSI6bnVsbCwidXNlcl9pZCI6IjEiLCJyb2xlX2lkIjoiMSIsInBob25lIjoiMTIzMzMzMzMzMzMzIiwic2NvcGUiOlsiYWxsIl0sIm5pY2tfbmFtZSI6IueuoeeQhuWRmCIsIm9hdXRoX2lkIjoiIiwiZGV0YWlsIjp7InR5cGUiOiJ3ZWIifSwiZXhwIjoxNjYyMDI4NDY5LCJkZXB0X2lkIjoiMSIsImp0aSI6ImNhMDllYTgxLTJkYzctNGFmYy1iNjM0LTBmYjkxMjQwMDczZiIsImFjY291bnQiOiJhZG1pbiIsImVtYWlsIjoiYWRtaW5AYmxhZGV4LnZpcCJ9.Z809GxffLyG72z6dMwemm73rJWsOgxoGuby-ZRsvdTk

===Headers===  authorization: Basic c2FiZXI6c2FiZXJfc2VjcmV0

===Headers===  sec-ch-ua-mobile: ?0

===Headers===  sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"

===Headers===  connection: close

===Headers===  host: localhost:8080

================  Gateway Request End  =================


2022-09-01 17:34:36.872  INFO 57272 --- [tor-http-nio-11] c.e.g.filter.GlobalResponseLogFilter     : 


================ Gateway Response Start  ================

<=== 401 GET: /blade-auth/oauth/logout

===Headers===  transfer-encoding: chunked

===Headers===  WWW-Authenticate: Basic realm="Realm"

===Headers===  X-Content-Type-Options: nosniff

===Headers===  X-XSS-Protection: 1; mode=block

===Headers===  Cache-Control: no-cache, no-store, max-age=0, must-revalidate

===Headers===  Pragma: no-cache

===Headers===  Expires: 0

===Headers===  Content-Type: application/json;charset=UTF-8

===Headers===  Date: Thu, 01 Sep 2022 09:34:36 GMT

===Headers===  connection: close

================  Gateway Response End  =================

五、若有更多详细信息,请在下面提供。


1条回答
  • 再仔细对比下单点登录的提交记录代码,看下哪里漏了。

    0 讨论(0)
代码语言
提交回复