java网站开发视频十大舆情网站

对于rest api 不能没有限制的任何人随意调用，需要提供账号信息。

一：工作流引擎增加过滤器

/*** 对/engine-rest/*进行鉴权，防止非法攻击* 客户端调用需要配置用户凭证否则报错401* camunda.bpm.client.basic-auth.username=* camunda.bpm.client.basic-auth.password=*/
@Configuration
public class AuthFilterConfig implements ServletContextInitializer {@Overridepublic void onStartup(ServletContext servletContext) throws ServletException {FilterRegistration.Dynamic authFilter = servletContext.addFilter("camunda-auth", ProcessEngineAuthenticationFilter.class);authFilter.setAsyncSupported(true);authFilter.setInitParameter("authentication-provider","org.camunda.bpm.engine.rest.security.auth.impl.HttpBasicAuthenticationProvider");authFilter.addMappingForUrlPatterns(null,true,"/engine-rest/*");}
}

二：客户端配置账号

camunda:bpm:client:base-url: http://localhost:8080/engine-restmax-tasks: 1worker-id: springboot-camunda-clientasync-response-timeout: 20000lock-duration: 10000basic-auth:username: adminpassword: 123456