Comments (10)
每个微服务都加入资源服务器的配置太冗余了,可以限制用户直接访问到微服务,必须通过网关访问。https://blog.csdn.net/Hpsyche/article/details/102926010
from youlai-mall.
也是,但是这样子就做不到服务之间的权限限制了,我是在想这个问题。虽然安全方面上可以在服务器上限制仅哪些ip可以访问
from youlai-mall.
应该没必要担心微服务之间的相互调用权限的问题,毕竟请求到微服务都会走过一趟网关了,经过鉴权后的微服务在再调用另一个微服务说的过去
from youlai-mall.
应该没必要担心微服务之间的相互调用权限的问题,毕竟请求到微服务都会走过一趟网关了,经过鉴权后的微服务在再调用另一个微服务说的过去
还有一个小问题,资源权限角色缓存在redis里面的信息是不是还没做动态更新,假如修改了资源角色关系的话,是不是应该更新一下缓存呢
from youlai-mall.
是的,应该要更新redis的缓存,这边因为目前着手几个端开发就自己一个人,时间有限,所以暂目前没做
from youlai-mall.
是的,应该要更新redis的缓存,这边因为目前着手几个端开发就自己一个人,时间有限,所以暂目前没做
那我觉得没必要做成启动加载,做成接口缓存更好吧
from youlai-mall.
这个没必要暴露出来手动刷新吧
from youlai-mall.
每个微服务都加入资源服务器的配置太冗余了,可以限制用户直接访问到微服务,必须通过网关访问。https://blog.csdn.net/Hpsyche/article/details/102926010
随着项目的发展 网关会成为瓶颈
from youlai-mall.
每个微服务都加入资源服务器的配置太冗余了,可以限制用户直接访问到微服务,必须通过网关访问。https://blog.csdn.net/Hpsyche/article/details/102926010
随着项目的发展 网关会成为瓶颈
网关做一下集群不久可以了吗,
from youlai-mall.
为啥,又变成每个资源服务器单独认证了
from youlai-mall.
Related Issues (20)
- 不更新了吗
- 本地启动中,auth服务和system服务问题 HOT 2
- 登录时报403错误 HOT 6
- [security vulnerability] Arbitrary User Information Access Vulnerability
- [security vulnerability] Arbitrary Order Detail Access Vulnerability
- [security vulnerability] Arbitrary Address Details Access Vulnerability
- [security vulnerability] Arbitrary Address Deletion Vulnerability
- 请问注销怎么实现呢? HOT 1
- [security vulnerability] Arbitrary Order Free delete
- [security vulnerability] Arbitrary Order Free Pay
- [security vulnerability] Arbitrary Address Update
- [sercurity vulnerability] sql inject
- Nacos启动报错
- 角色管理修改排序和状态无效
- 您好,请问下每个服务下对应都有两个模块api和boot,这样分模块是为什么呢 HOT 1
- common-log 怎么使用? HOT 2
- 这东西怎么填,不太会 HOT 1
- bug:There is no client authentication HOT 4
- 是否会增加模块——操作日志等
- 现在seata用的什么版本
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from youlai-mall.