190 lines
4.8 KiB
Markdown
190 lines
4.8 KiB
Markdown
# 阿里云身份认证配置文件设置指南
|
||
|
||
## 配置方式说明
|
||
|
||
根据用户需求，系统已配置为**直接从配置文件读取**阿里云身份认证信息，不使用环境变量。
|
||
|
||
## 配置文件结构
|
||
|
||
### application.yml 配置
|
||
```yaml
|
||
aliyun:
|
||
# --- 阿里云身份认证服务配置 ---
|
||
cloudauth:
|
||
region: cn-hangzhou # 区域配置
|
||
endpoint: cloudauth.aliyuncs.com # API端点
|
||
# 直接从配置文件读取认证信息
|
||
access-key-id: LTAI5t68do3qVXx5Rufugt3X # AccessKey ID
|
||
access-key-secret: 2vD9ToIff49Vph4JQXsn0Cy8nXQfzA # AccessKey Secret
|
||
connection-timeout: 10000 # 连接超时时间(ms)
|
||
response-timeout: 10000 # 响应超时时间(ms)
|
||
# 身份认证配置
|
||
biz-type: ID_2META # 业务类型：身份证二要素验证
|
||
param-type: normal # 参数类型：normal表示不加密
|
||
```
|
||
|
||
## 代码配置读取
|
||
|
||
### Java 配置注入
|
||
```java
|
||
@Value("${aliyun.cloudauth.access-key-id}")
|
||
private String accessKeyId;
|
||
|
||
@Value("${aliyun.cloudauth.access-key-secret}")
|
||
private String accessKeySecret;
|
||
|
||
@Value("${aliyun.cloudauth.region}")
|
||
private String region;
|
||
|
||
@Value("${aliyun.cloudauth.endpoint}")
|
||
private String endpoint;
|
||
|
||
@Value("${aliyun.cloudauth.param-type}")
|
||
private String paramType;
|
||
```
|
||
|
||
### 特点说明
|
||
- ✅ **直接读取**: 无默认值，直接从配置文件读取
|
||
- ✅ **无环境变量依赖**: 完全不依赖环境变量
|
||
- ✅ **配置集中**: 所有配置在application.yml中统一管理
|
||
- ✅ **类型安全**: Spring会自动进行类型转换和验证
|
||
|
||
## 配置参数说明
|
||
|
||
| 参数 | 说明 | 示例值 | 必需 |
|
||
|------|------|--------|------|
|
||
| `region` | 阿里云区域 | cn-hangzhou | ✅ |
|
||
| `endpoint` | API端点 | cloudauth.aliyuncs.com | ✅ |
|
||
| `access-key-id` | 阿里云AccessKey ID | LTAI5t68... | ✅ |
|
||
| `access-key-secret` | 阿里云AccessKey Secret | 2vD9ToIf... | ✅ |
|
||
| `connection-timeout` | 连接超时时间(毫秒) | 10000 | ✅ |
|
||
| `response-timeout` | 响应超时时间(毫秒) | 10000 | ✅ |
|
||
| `biz-type` | 业务类型 | ID_2META | ✅ |
|
||
| `param-type` | 参数类型 | normal | ✅ |
|
||
|
||
## 配置验证
|
||
|
||
### 启动时验证
|
||
应用启动时会自动验证配置：
|
||
```
|
||
2024-09-01 10:30:00 INFO - 阿里云身份认证配置加载成功
|
||
2024-09-01 10:30:00 INFO - Region: cn-hangzhou
|
||
2024-09-01 10:30:00 INFO - Endpoint: cloudauth.aliyuncs.com
|
||
2024-09-01 10:30:00 INFO - ParamType: normal
|
||
```
|
||
|
||
### 运行时日志
|
||
API调用时会显示配置信息：
|
||
```
|
||
调用阿里云Id2MetaStandardVerify API - 姓名: 张三, 身份证: 110101****, ParamType: normal
|
||
```
|
||
|
||
## 安全配置建议
|
||
|
||
### 1. 生产环境配置
|
||
```yaml
|
||
aliyun:
|
||
cloudauth:
|
||
region: cn-hangzhou
|
||
endpoint: cloudauth.aliyuncs.com
|
||
access-key-id: [生产环境AccessKey ID]
|
||
access-key-secret: [生产环境AccessKey Secret]
|
||
param-type: normal
|
||
```
|
||
|
||
### 2. 测试环境配置
|
||
```yaml
|
||
aliyun:
|
||
cloudauth:
|
||
region: cn-hangzhou
|
||
endpoint: cloudauth.aliyuncs.com
|
||
access-key-id: [测试环境AccessKey ID]
|
||
access-key-secret: [测试环境AccessKey Secret]
|
||
param-type: normal
|
||
```
|
||
|
||
### 3. 权限要求
|
||
确保AccessKey具有以下权限：
|
||
- `AliyunCloudAuthFullAccess` (推荐)
|
||
- 或最小权限：`cloudauth:Id2MetaStandardVerify`
|
||
|
||
## 配置修改步骤
|
||
|
||
### 1. 更新AccessKey
|
||
```yaml
|
||
# 修改application.yml
|
||
aliyun:
|
||
cloudauth:
|
||
access-key-id: [新的AccessKey ID]
|
||
access-key-secret: [新的AccessKey Secret]
|
||
```
|
||
|
||
### 2. 重启应用
|
||
```bash
|
||
# 重启Spring Boot应用
|
||
mvn spring-boot:run
|
||
# 或
|
||
java -jar target/1818_user_server-1.0-SNAPSHOT.jar
|
||
```
|
||
|
||
### 3. 验证配置
|
||
查看启动日志确认配置加载成功
|
||
|
||
## 故障排除
|
||
|
||
### 配置缺失错误
|
||
```
|
||
Error: Could not resolve placeholder 'aliyun.cloudauth.access-key-id'
|
||
```
|
||
**解决方案**: 检查application.yml中是否正确配置了所有必需参数
|
||
|
||
### 权限错误
|
||
```
|
||
API响应Code: 440, Message: 无权限调用
|
||
```
|
||
**解决方案**:
|
||
1. 检查AccessKey权限
|
||
2. 确认实人认证服务已开通
|
||
3. 验证区域配置正确
|
||
|
||
### 网络连接错误
|
||
```
|
||
调用阿里云身份认证API失败: Connect timeout
|
||
```
|
||
**解决方案**:
|
||
1. 检查网络连接
|
||
2. 验证endpoint配置
|
||
3. 检查防火墙设置
|
||
|
||
## 配置文件示例
|
||
|
||
### 完整配置示例
|
||
```yaml
|
||
# application.yml
|
||
server:
|
||
port: 8081
|
||
|
||
spring:
|
||
application:
|
||
name: 1818-user-server
|
||
|
||
# 其他配置...
|
||
|
||
aliyun:
|
||
cloudauth:
|
||
region: cn-hangzhou
|
||
endpoint: cloudauth.aliyuncs.com
|
||
access-key-id: LTAI5t68do3qVXx5Rufugt3X
|
||
access-key-secret: 2vD9ToIff49Vph4JQXsn0Cy8nXQfzA
|
||
connection-timeout: 10000
|
||
response-timeout: 10000
|
||
biz-type: ID_2META
|
||
param-type: normal
|
||
```
|
||
|
||
---
|
||
|
||
*配置方式：直接配置文件读取*
|
||
*更新时间：2024年9月1日*
|
||
*状态：✅ 已实施并验证*
|