0
0

SpringBoot3.3.0升级方案

  1.   本文介绍了由SpringBoot2升级到SpringBoot3.3.0升级方案，新版本的升级可以解决旧版本存在的部分漏洞问题。

一、jdk17下载安装

1、下载

官网下载地址

Java Archive Downloads - Java SE 17

Jdk17下载后，可不设置系统变量java_home，仅在idea的指定项目中设置即可。

2、Jdk17项目环境设置

a).File-->Settings-->Build,Execution,Deployment-->Compiler-->Java Compiler

b).File-->Project Settings-->modules

source和Dependencies均设置为jdk17

c).File-->Plateform Settings-->SDKS

d).启动类Edit Configuration-->Run/Debug Configurations

二、依赖升级

主要依赖升级和替换引入

Java17 && Spring3.3.0 && mybatis-plus3.5.6 && Spring Security6.3.0 && Swagger3 && jakarta &&maven3.6

1、Java17依赖升级

  1. <properties>
  3. <java.version>17</java.version>
  5. <mybatis-plus.version>3.5.6</mybatis-plus.version>
  7. <flowable.version>7.0.0</flowable.version>
  9. </properties>
  1. <build>
  2.     <plugins>
  3.         <plugin>
  4.             <groupId>org.apache.maven.plugins</groupId>
  5.             <artifactId>maven-compiler-plugin</artifactId>
  6.             <version>3.1</version>
  7.             <configuration>
  8.                 <source>${java.version}</source>
  9.                 <target>${java.version}</target>
  10.                 <encoding>${project.build.sourceEncoding}</encoding>
  11.             </configuration>
  12.         </plugin>
  13.     </plugins>
  14. </build>

2、SpringBoot3.3.0依赖升级

  1. <!-- SpringBoot的依赖配置-->
  2. <dependency>
  3.     <groupId>org.springframework.boot</groupId>
  4.     <artifactId>spring-boot-dependencies</artifactId>
  5.     <version>3.3.0</version>
  6.     <type>pom</type>
  7.     <scope>import</scope>
  8. </dependency>

3、mybatis-plus3.5.6依赖升级

  1. <dependency>
  2.     <groupId>com.baomidou</groupId>
  3.     <artifactId>mybatis-plus-boot-starter</artifactId>
  4.     <version>${mybatis-plus.version}</version>
  5.     <exclusions>
  6.         <exclusion>
  7.             <groupId>org.mybatis</groupId>
  8.             <artifactId>mybatis-spring</artifactId>
  9.         </exclusion>
  10.     </exclusions>
  11. </dependency>
  12. <dependency>
  13.     <groupId>org.mybatis</groupId>
  14.     <artifactId>mybatis-spring</artifactId>
  15.     <version>3.0.3</version>
  16. </dependency>
  1. <dependency>
  2.     <groupId>org.springframework</groupId>
  3.     <artifactId>spring-web</artifactId>
  4. </dependency>
  5. <dependency>
  6.     <groupId>com.baomidou</groupId>
  7.     <artifactId>mybatis-plus-core</artifactId>
  8.     <version>3.5.6</version>
  9.     <scope>compile</scope>
  10. </dependency>

4、SpringSecurity6.3.0依赖升级

  1. <dependency>
  2.     <groupId>org.springframework.security</groupId>
  3.     <artifactId>spring-security-config</artifactId>
  4.     <version>6.3.0</version>
  5. </dependency>
  6. <dependency>
  7.     <groupId>org.springframework.security</groupId>
  8.     <artifactId>spring-security-core</artifactId>
  9.     <version>6.3.0</version>
  10. </dependency>

5、Swagger.3.0依赖升级

  1. <dependency>
  2.     <groupId>org.springframework</groupId>
  3.     <artifactId>spring-webmvc</artifactId>
  4.     <version>6.1.8</version>
  5. </dependency>
  6. <dependency>
  7.     <groupId>org.springdoc</groupId>
  8.     <artifactId>springdoc-openapi-starter-webmvc-ui</artifactId>
  9.     <version>2.3.0</version>
  10. </dependency>
  11. <dependency>
  12.     <groupId>org.projectlombok</groupId>
  13.     <artifactId>lombok</artifactId>
  14. </dependency>
  1. <!-- openAPI包，替换 Swagger 的 SpringFox -->
  2. <dependency>
  3.     <groupId>org.springdoc</groupId>
  4.     <artifactId>springdoc-openapi-starter-webmvc-ui</artifactId>
  5.     <version>2.3.0</version>
  6. </dependency>
  8. <dependency>
  9.     <groupId>org.springframework.boot</groupId>
  10.     <artifactId>spring-boot-starter-web</artifactId>
  11. </dependency>
  13. <dependency>
  14.     <groupId>org.projectlombok</groupId>
  15.     <artifactId>lombok</artifactId>
  16.     <optional>true</optional>
  17. </dependency>
  18. <dependency>
  19.     <groupId>org.springframework.boot</groupId>
  20.     <artifactId>spring-boot-starter-test</artifactId>
  21.     <scope>test</scope>
  22. </dependency>

6、jakarta包替换

  1. <dependency>
  2.     <groupId>jakarta.annotation</groupId>
  3.     <artifactId>jakarta.annotation-api</artifactId>
  4. </dependency>

7、其他

  1. <dependency>
  2.     <groupId>org.springframework</groupId>
  3.     <artifactId>spring-context-support</artifactId>
  4. </dependency>
  5. <dependency>
  6.     <groupId>org.springframework.security</groupId>
  7.     <artifactId>spring-security-core</artifactId>
  8. </dependency>
  9. <dependency>
  10.     <groupId>org.springframework</groupId>
  11.     <artifactId>spring-web</artifactId>
  12. </dependency>
  13. <dependency>
  14.     <groupId>jakarta.validation</groupId>
  15.     <artifactId>jakarta.validation-api</artifactId>
  16. </dependency>
  17. <dependency>
  18.     <groupId>org.apache.commons</groupId>
  19.     <artifactId>commons-lang3</artifactId>
  20. </dependency>
  22. <dependency>
  23.     <groupId>com.fasterxml.jackson.core</groupId>
  24.     <artifactId>jackson-annotations</artifactId>
  25. </dependency>
  26. <dependency>
  27.     <groupId>org.springframework</groupId>
  28.     <artifactId>spring-tx</artifactId>
  29. </dependency>
  30. <dependency>
  31.     <groupId>org.springframework</groupId>
  32.     <artifactId>spring-tx</artifactId>
  33. </dependency>

版本查看：

mvn -version

java -version

三、Swagger3.0升级(OpenAPI)

1、配置文件

OpenAPIConfig.java

  1. package com.inspur.web.core.config;
  3. import io.swagger.v3.oas.models.ExternalDocumentation;
  4. import io.swagger.v3.oas.models.OpenAPI;
  5. import io.swagger.v3.oas.models.info.Info;
  6. import org.springframework.context.annotation.Bean;
  7. import org.springframework.context.annotation.Configuration;
  9. /**
  10.  * @author: Inspur
  11.  * @datetime: 2024/3/26
  12.  * @desc:
  13.  */
  14. @Configuration
  15. public class OpenAPIConfig {
  16.     @Bean
  17.     public OpenAPI openAPI() {
  18.         return new OpenAPI()
  19.                 .info(new Info()
  20.                         .title("接口文档标题")
  21.                         .description("SpringBoot3 集成 Swagger3接口文档")
  22.                         .version("v1"))
  23.                 .externalDocs(new ExternalDocumentation()
  24.                         .description("项目API文档")
  25.                         .url("/"));
  26.     }
  27. }

2、使用示例

SwaggerController.java

  1. import io.swagger.v3.oas.annotations.Hidden;
  2. import io.swagger.v3.oas.annotations.Operation;
  3. import io.swagger.v3.oas.annotations.Parameter;
  4. import io.swagger.v3.oas.annotations.Parameters;
  5. import io.swagger.v3.oas.annotations.responses.ApiResponse;
  6. import io.swagger.v3.oas.annotations.responses.ApiResponses;
  7. import io.swagger.v3.oas.annotations.tags.Tag;
  8. import org.springframework.web.bind.annotation.*;
  9. /**
  10.  * @author: zjl
  11.  * @datetime: 2024/3/26
  12.  * @desc:
  13.  */
  14. @Tag(name = "控制器：测试Swagger3", description = "描述：测试Swagger3")
  15. @RestController
  16. public class SwaggerController {
  18.     @Operation(summary = "测试Swagger3注解方法Get")
  19.     @Parameters({@Parameter(name = "id",description = "编码"),
  20.             @Parameter(name = "headerValue",description = "header传送内容")})
  21.     @ApiResponses({
  22.             @ApiResponse(responseCode = "200", description = "请求成功"),
  23.             @ApiResponse(responseCode = "400", description = "请求参数没填好"),
  24.             @ApiResponse(responseCode = "401", description = "没有权限"),
  25.             @ApiResponse(responseCode = "403", description = "禁止访问"),
  26.             @ApiResponse(responseCode = "404", description = "请求路径没有或页面跳转路径不对")
  27.     })
  28.     @GetMapping(value = "/swagger/student")
  29.     public Object getStudent(@RequestParam @Parameter(example = "2")  String id,
  30.                              @RequestHeader @Parameter(example = "2") String headerValue){
  31.         return id;
  32.     }
  34.     @Operation(summary = "测试Swagger3注解方法Post")
  35.     @ApiResponses({
  36.             @ApiResponse(responseCode = "200", description = "请求成功"),
  37.             @ApiResponse(responseCode = "400", description = "请求参数没填好"),
  38.             @ApiResponse(responseCode = "401", description = "没有权限"),
  39.             @ApiResponse(responseCode = "403", description = "禁止访问"),
  40.             @ApiResponse(responseCode = "404", description = "请求路径没有或页面跳转路径不对")
  41.     })
  42.     @PostMapping(value = "/swagger/student", produces = "application/json")
  43.     public SwaggerApiModel updateStudent(@RequestBody SwaggerApiModel model){
  44.         return model;
  45.     }
  47.     /**
  48.      * swagger 不暴漏该 api，通过@Hidden隐藏
  49.      * 但是仍然可以访问
  50.      * @return
  51.      */
  52.     @Hidden
  53.     @GetMapping(value = "/swagger/hiddenApi")
  54.     public String hiddenApi(){
  55.         return "hiddenApi";
  56.     }
  58.     /**
  59.      * swagger 暴漏该 api，没有配置@Hidden会展示
  60.      * @return
  61.      */
  62.     @GetMapping(value = "/swagger/noHiddenApi")
  63.     public String noHiddenApi(){
  64.         return "noHiddenApi";
  65.     }
  66. }

3、swagger2和swagger3主要区别

四、SpringSecurity6

1、拦截器变化

extends HandlerInterceptorAdapter

==>

implements HandlerInterceptor

自定义拦截器

implements WebMvcConfigurer

==>

extends WebMvcConfigurationSupport

跨域配置eg：ResourceConfig.java：

addAllowedOrigin ==>

addAllowedOriginPattern

  1. @Configuration
  2. public class ResourcesConfig implements WebMvcConfigurer
  3. {
  5. @Bean
  6. public CorsFilter corsFilter()
  7. {
  9. // 设置访问源地址
  10. // config.addAllowedOrigin("*");
  12. config.addAllowedOriginPattern("*");
  14. }
  16. }

2、过滤器变化

antMatchers ==> requestMatchers

匹配地址时 “*”==> “”

示例:

Spring2:

  1. public class SecurityConfig extends WebSecurityConfigurerAdapter
  2. {
  4. @Bean
  5. @Override
  6. public AuthenticationManager authenticationManagerBean() throws Exception
  7. {
  8.     return super.authenticationManagerBean();
  9. }
  11. @Override
  12. protected void configure(HttpSecurity httpSecurity) throws Exception
  13. {
  14.     httpSecurity
  15.             // CSRF禁用，因为不使用session
  16.             .csrf().disable()
  17.             // 认证失败处理类
  18.             .exceptionHandling().authenticationEntryPoint(unauthorizedHandler).and()
  19.             // 基于token，所以不需要session
  20.             .sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS).and()
  21.             // 过滤请求
  22.             .authorizeRequests()
  23.             // 对于登录login 注册register 验证码captchaImage 允许匿名访问
  24.             .antMatchers("/login","/loginApp", "/appLogin","/register", "/captchaImage","/factory/getPublicKey").anonymous()
  25.             .antMatchers(
  26.                     HttpMethod.GET,
  27.                     "/",
  28.                     "/*.html",
  29.                     "/**/*.html",
  30.                     "/**/*.css",
  31.                     "/**/*.js",
  32.                     "/profile/**"
  33.             ).permitAll()
  34.             .antMatchers("/common/download**").anonymous()
  36.         // 除上面外的所有请求全部需要鉴权认证
  37.         .anyRequest().authenticated()
  38.         .and()
  39.         .headers().frameOptions().disable();
  40. httpSecurity.logout().logoutUrl("/logout").logoutSuccessHandler(logoutSuccessHandler);
  41. // 添加JWT filter
  42. httpSecurity.addFilterBefore(authenticationTokenFilter, UsernamePasswordAuthenticationFilter.class);
  43. // 添加CORS filter
  44. httpSecurity.addFilterBefore(corsFilter, JwtAuthenticationTokenFilter.class);
  45. httpSecurity.addFilterBefore(corsFilter, LogoutFilter.class);
  47. }
  49.     @Override
  50.     protected void configure(AuthenticationManagerBuilder auth) throws Exception
  51.     {
  52.         auth.userDetailsService(userDetailsService).passwordEncoder(bCryptPasswordEncoder());
  53.     }
  54. }
  56. /**
  57.  * 强散列哈希加密实现
  58.  */
  59. @Bean
  60. public BCryptPasswordEncoder bCryptPasswordEncoder()
  61. {
  62.     return new BCryptPasswordEncoder();
  63. }
  65. }

Spring3：

  1. @Configuration
  2. @EnableWebSecurity
  3. @AllArgsConstructor
  4. @EnableMethodSecurity
  5. public class SecurityConfig
  6. {
  8. @Bean
  9. public AuthenticationManager authenticationManager(AuthenticationConfiguration authenticationConfiguration) throws Exception {
  10.     return authenticationConfiguration.getAuthenticationManager();
  11. }
  13. @Bean
  14. public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
  15.     http
  16.             // CSRF禁用，因为不使用session
  17.             .csrf().disable()
  18.             // 禁用HTTP响应标头
  19.             .headers().cacheControl().disable().and()
  20.             // 认证失败处理类
  21.             .exceptionHandling().authenticationEntryPoint(unauthorizedHandler).and()
  22.             // 基于token，所以不需要session
  23.             .sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS).and()
  24.             // 过滤请求
  25.             .authorizeRequests()
  26.             // 对于登录login 注册register 验证码captchaImage 允许匿名访问
  27.             //                // 对于登录login 注册register 验证码captchaImage 允许匿名访问
  28.             .requestMatchers("/login","/loginApp", "/appLogin","/register", "/captchaImage","/factory/getPublicKey").anonymous()
  29.             .requestMatchers(
  30.                     HttpMethod.GET,
  31.                     "/",
  32.                     "/*.html",
  33.                     "/*/*.html",
  34.                     "/*/*.css",
  35.                     "/*/*.js",
  36.                     "/profile/**"
  37.             ).permitAll()
  38.             .requestMatchers("/common/download**").anonymous()
  40.         // 除上面外的所有请求全部需要鉴权认证
  41.         .anyRequest().authenticated()
  42.         .and()
  43.         .headers().frameOptions().disable();
  44. // 添加Logout filter
  45. http.logout().logoutUrl("/logout").logoutSuccessHandler(logoutSuccessHandler);
  46. // 添加JWT filter
  47. http.addFilterBefore(authenticationTokenFilter, UsernamePasswordAuthenticationFilter.class);
  48. // 添加CORS filter
  49. http.addFilterBefore(corsFilter, JwtAuthenticationTokenFilter.class);
  50. http.addFilterBefore(corsFilter, LogoutFilter.class);
  52. }
  54. /**
  55.  * 强散列哈希加密实现
  56.  */
  57. @Bean
  58. public BCryptPasswordEncoder bCryptPasswordEncoder()
  59. {
  60.     return new BCryptPasswordEncoder();
  61. }
  63. }

五、Maven3.6

六、javax替换 Jakarta

批量替换：

javax.persistence.* -> jakarta.persistence.*

javax.validation.* -> jakarta.validation.*

javax.servlet.* -> jakarta.servlet.*

javax.annotation.* -> jakarta.annotation.*

javax.transaction.* -> jakarta.transaction.*

import javax. ==> import jakarta.

或者使用idea工具：Refactor==>Migrate

七、controller请求地址问题

对于GetMapping方法，@PathVariable(“roleId”) 需要注明变量名

public AjaxResult getInfo(@PathVariable Long roleId)

==>

public AjaxResult getInfo(@PathVariable("roleId") Long roleId)

八、配置文件修改

  1. # swagger3
  3. spring:
  5.   mvc:
  6.       pathmatch:
  7.       matching-strategy: ant_path_matcher
  9. # 升级后可能导致不支持Bean的注入依赖，可以在配置文件解决
  11.   main:
  13.     allow-circular-references: true  #允许循环依赖
标签： java 开发语言
本文转载自: https://blog.csdn.net/xingyuemengjin/article/details/140389165
版权归原作者 曼曼青青草 所有， 如有侵权，请联系我们删除。
登录后发布评论

“SpringBoot3.3.0升级方案”的评论:

还没有评论
关于作者
...
overfit同步小助手
文章同步
相关阅读

网络安全法-网络运行安全

使用selenium/drissionpage时如何阻止chrome自动跳转http到https

docker desktop 里部署的Open WebUI 管理员密码忘记了的处理方法

在ubuntu20.04中搭建onsite比赛运行环境

利用开源的低代码表单设计器FcDesigner高效管理和渲染复杂表单结构

Kafka学习笔记

【前端】浏览器输入url到页面呈现发生了什么？