Debian环境下Swagger安全配置

在Debian环境下配置Swagger的安全性，通常涉及到几个方面：API密钥验证、OAuth2认证、JWT（JSON Web Tokens）等。以下是一个基本的指南，展示如何在Debian上使用Spring Boot和Springfox Swagger来实现这些安全配置。

1. 安装Java和Maven

首先，确保你的Debian系统上已经安装了Java和Maven。如果没有安装，可以使用以下命令进行安装：

sudo apt update
sudo apt install openjdk-11-jdk maven

2. 创建Spring Boot项目

你可以使用Spring Initializr来创建一个新的Spring Boot项目。访问https://start.spring.io/，选择所需的依赖项（例如Spring Web和Springfox Swagger），然后下载生成的项目压缩包。

解压项目并导入到你的IDE中（例如IntelliJ IDEA或Eclipse）。

3. 配置Swagger

在你的Spring Boot项目中，创建一个配置类来启用Swagger：

import springfox.documentation.builders.PathSelectors;
import springfox.documentation.builders.RequestHandlerSelectors;
import springfox.documentation.spi.DocumentationType;
import springfox.documentation.spring.web.plugins.Docket;
import springfox.documentation.swagger2.annotations.EnableSwagger2;

@Configuration
@EnableSwagger2
public class SwaggerConfig {
    @Bean
    public Docket api() {
        return new Docket(DocumentationType.SWAGGER_2)
                .select()
                .apis(RequestHandlerSelectors.basePackage("com.example.demo"))
                .paths(PathSelectors.any())
                .build();
    }
}

4. 配置API密钥验证

在Swagger配置中添加API密钥验证：

import springfox.documentation.service.ApiKey;
import springfox.documentation.service.SecurityScheme;
import springfox.documentation.spi.DocumentationType;
import springfox.documentation.spi.service.contexts.SecurityContext;
import springfox.documentation.spring.web.plugins.Docket;
import springfox.documentation.swagger2.annotations.EnableSwagger2;

import java.util.Arrays;
import java.util.Collections;

@Configuration
@EnableSwagger2
public class SwaggerConfig {
    @Bean
    public Docket api() {
        return new Docket(DocumentationType.SWAGGER_2)
                .select()
                .apis(RequestHandlerSelectors.basePackage("com.example.demo"))
                .paths(PathSelectors.any())
                .build()
                .securitySchemes(Arrays.asList(apiKey()))
                .securityContexts(Arrays.asList(securityContext()));
    }

    private ApiKey apiKey() {
        return new ApiKey("JWT", "Authorization", "header");
    }

    private SecurityContext securityContext() {
        return SecurityContext.builder()
                .securityReferences(defaultAuth())
                .forPaths(PathSelectors.any())
                .build();
    }

    List<SecurityReference> defaultAuth() {
        AuthorizationScope authorizationScope = new AuthorizationScope("global", "accessEverything");
        AuthorizationScope[] authorizationScopes = new AuthorizationScope[1];
        authorizationScopes[0] = authorizationScope;
        return Arrays.asList(new SecurityReference("JWT", authorizationScopes));
    }
}

5. 配置OAuth2认证

如果你使用OAuth2进行认证，可以在Swagger配置中添加OAuth2支持：

import springfox.documentation.builders.PathSelectors;
import springfox.documentation.builders.RequestHandlerSelectors;
import springfox.documentation.service.*;
import springfox.documentation.spi.DocumentationType;
import springfox.documentation.spi.service.contexts.SecurityContext;
import springfox.documentation.spring.web.plugins.Docket;
import springfox.documentation.swagger2.annotations.EnableSwagger2;

import java.util.Arrays;
import java.util.Collections;
import java.util.List;

@Configuration
@EnableSwagger2
public class SwaggerConfig {
    @Bean
    public Docket api() {
        return new Docket(DocumentationType.SWAGGER_2)
                .select()
                .apis(RequestHandlerSelectors.basePackage("com.example.demo"))
                .paths(PathSelectors.any())
                .build()
                .securitySchemes(Arrays.asList(securityScheme()))
                .securityContexts(Arrays.asList(securityContext()));
    }

    private SecurityScheme securityScheme() {
        GrantType grantType = new ResourceOwnerPasswordCredentialsGrant(new TokenRequestEndpoint("/oauth/token", "username", "password"), new UserInfoEndpoint("/user"));
        return new OAuth(grantType, Collections.singletonList(new AuthorizationScope("read", "for reading")), Arrays.asList(new TokenEndpoint("/oauth/token", "access_token")));
    }

    private SecurityContext securityContext() {
        return SecurityContext.builder()
                .securityReferences(defaultAuth())
                .forPaths(PathSelectors.any())
                .build();
    }

    List<SecurityReference> defaultAuth() {
        AuthorizationScope authorizationScope = new AuthorizationScope("global", "accessEverything");
        AuthorizationScope[] authorizationScopes = new AuthorizationScope[1];
        authorizationScopes[0] = authorizationScope;
        return Arrays.asList(new SecurityReference("JWT", authorizationScopes));
    }
}

6. 运行Spring Boot应用

在IDE中运行你的Spring Boot应用，然后访问http://localhost:8080/swagger-ui.html来查看Swagger UI界面。你应该能够看到安全配置已经生效，并且可以进行相应的认证操作。

7. 配置Nginx反向代理（可选）

如果你希望通过Nginx来代理你的Spring Boot应用，可以在Nginx配置文件中添加以下内容：

server {
    listen 80;
    server_name yourdomain.com;

    location / {
        proxy_pass http://localhost:8080;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
}

然后重启Nginx服务：

sudo systemctl restart nginx

这样，你的Swagger UI界面就可以通过http://yourdomain.com/swagger-ui.html访问了。

通过以上步骤，你可以在Debian环境下配置Swagger的安全性，确保你的API得到适当的保护。