java网站开发视频百度快照什么意思
对于rest api 不能没有限制的任何人随意调用,需要提供账号信息。
一:工作流引擎增加过滤器
/*** 对/engine-rest/*进行鉴权,防止非法攻击* 客户端调用需要配置用户凭证否则报错401* camunda.bpm.client.basic-auth.username=* camunda.bpm.client.basic-auth.password=*/
@Configuration
public class AuthFilterConfig implements ServletContextInitializer {@Overridepublic void onStartup(ServletContext servletContext) throws ServletException {FilterRegistration.Dynamic authFilter = servletContext.addFilter("camunda-auth", ProcessEngineAuthenticationFilter.class);authFilter.setAsyncSupported(true);authFilter.setInitParameter("authentication-provider","org.camunda.bpm.engine.rest.security.auth.impl.HttpBasicAuthenticationProvider");authFilter.addMappingForUrlPatterns(null,true,"/engine-rest/*");}
}
二:客户端配置账号
camunda:bpm:client:base-url: http://localhost:8080/engine-restmax-tasks: 1worker-id: springboot-camunda-clientasync-response-timeout: 20000lock-duration: 10000basic-auth:username: adminpassword: 123456