ibizdev提交

README.md

+# 系统概览

config.xml

+<?xml version='1.1' encoding='UTF-8'?>
+<project>
+  <actions/>
+  <description>ehr_practice01</description>
+  <keepDependencies>false</keepDependencies>
+  <properties>
+    <hudson.model.ParametersDefinitionProperty>
+      <parameterDefinitions>
+        <hudson.model.StringParameterDefinition>
+          <name>para1</name>
+          <description></description>
+          <defaultValue>para1</defaultValue>
+          <trim>false</trim>
+        </hudson.model.StringParameterDefinition>
+        <hudson.model.StringParameterDefinition>
+          <name>para2</name>
+          <description></description>
+          <defaultValue>para2</defaultValue>
+          <trim>false</trim>
+        </hudson.model.StringParameterDefinition>        
+      </parameterDefinitions>
+    </hudson.model.ParametersDefinitionProperty>
+  </properties>
+  <scm class="hudson.scm.NullSCM"/>
+  <canRoam>true</canRoam>
+  <disabled>false</disabled>
+  <blockBuildWhenDownstreamBuilding>false</blockBuildWhenDownstreamBuilding>
+  <blockBuildWhenUpstreamBuilding>false</blockBuildWhenUpstreamBuilding>
+  <triggers/>
+  <concurrentBuild>false</concurrentBuild>
+  <builders>
+    <hudson.tasks.Shell>
+      <command>
+      BUILD_ID=DONTKILLME
+      echo "registry.cn-shanghai.aliyuncs.com/ibizsys"
+      source /etc/profile
+      rm -rf ehr_practice01
+	  git clone -b master $para2 ehr_practice01/
+      export NODE_OPTIONS=--max-old-space-size=4096
+      cd ehr_practice01/
+      mvn clean package -Pwebapi
+      cd ehr-provider/ehr-provider-webapi
+      mvn -Pwebapi docker:build
+      mvn -Pwebapi docker:push
+      docker -H $para1 stack deploy --compose-file=src/main/docker/ehr-provider-webapi.yaml iBizPractice --with-registry-auth      
+      </command>
+    </hudson.tasks.Shell>
+  </builders>
+  <publishers>
+    <hudson.plugins.ws__cleanup.WsCleanup plugin="ws-cleanup@0.34">
+      <patterns class="empty-list"/>
+      <deleteDirs>false</deleteDirs>
+      <skipWhenFailed>false</skipWhenFailed>
+      <cleanWhenSuccess>true</cleanWhenSuccess>
+      <cleanWhenUnstable>true</cleanWhenUnstable>
+      <cleanWhenFailure>true</cleanWhenFailure>
+      <cleanWhenNotBuilt>true</cleanWhenNotBuilt>
+      <cleanWhenAborted>true</cleanWhenAborted>
+      <notFailBuild>false</notFailBuild>
+      <cleanupMatrixParent>false</cleanupMatrixParent>
+      <externalDelete></externalDelete>
+    </hudson.plugins.ws__cleanup.WsCleanup>
+  </publishers>
+  <buildWrappers/>
+</project>

ehr-app/ehr-app-ehr/pom.xml

+<?xml version="1.0" encoding="UTF-8"?>
+<project xmlns="http://maven.apache.org/POM/4.0.0"
+         xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
+    <modelVersion>4.0.0</modelVersion>
+    <parent>
+        <artifactId>ehr-app</artifactId>
+        <groupId>cn.ibizlab.ehr</groupId>
+        <version>1.0.0.0</version>
+    </parent>
+
+    <artifactId>ehr-app-ehr</artifactId>
+    <name>Ehr Gateway EHR</name>
+    <description>Ehr EHR</description>
+
+    <dependencies>
+		<dependency>
+			<groupId>cn.ibizlab.ehr</groupId>
+			<artifactId>ehr-util</artifactId>
+			<version>${project.version}</version>
+		</dependency>
+    </dependencies>
+
+
+    <properties>
+        <docker.image.prefix>registry.cn-shanghai.aliyuncs.com/ibizsys</docker.image.prefix>
+    </properties>
+
+
+    <profiles>
+        <profile>
+            <id>ehr</id>
+            <build>
+                <resources>
+                    <resource>
+                        <directory>${basedir}/src/main/webapp</directory>
+                        <!--注意此次必须要放在此目录下才能被访问到 -->
+                        <targetPath>META-INF/resources</targetPath>
+                        <includes>
+                            <include>**/**</include>
+                        </includes>
+                    </resource>
+                    <resource>
+                        <directory>${basedir}/src/main/resources</directory>
+                        <includes>
+                            <include>**/**</include>
+                        </includes>
+                    </resource>
+                </resources>
+                <plugins>
+                    <plugin>
+                        <groupId>org.codehaus.mojo</groupId>
+                        <artifactId>exec-maven-plugin</artifactId>
+                        <version>1.6.0</version>
+                        <executions>
+                            <execution>
+                                <id>exec-yarn-run-install</id>
+                                <phase>prepare-package</phase>
+                                <goals>
+                                    <goal>exec</goal>
+                                </goals>
+                                <configuration>
+                                    <executable>yarn</executable>
+                                    <workingDirectory>../../app_EHR</workingDirectory>
+                                </configuration>
+                            </execution>
+                            <execution>
+                                <id>exec-yarn-run-build</id>
+                                <phase>prepare-package</phase>
+                                <goals>
+                                    <goal>exec</goal>
+                                </goals>
+                                <configuration>
+                                    <executable>yarn</executable>
+                                    <arguments>
+                                        <argument>build</argument>
+                                    </arguments>
+                                    <workingDirectory>../../app_EHR</workingDirectory>
+                                </configuration>
+                            </execution>
+                        </executions>
+                    </plugin>
+
+                    <plugin>
+                        <groupId>org.springframework.boot</groupId>
+                        <artifactId>spring-boot-maven-plugin</artifactId>
+                        <configuration>
+                            <finalName>ehr-app-ehr</finalName>
+                            <jvmArguments>-Dfile.encoding=UTF-8</jvmArguments>
+                            <mainClass>cn.ibizlab.ehr.ehr.EHRApplication</mainClass>
+                            <outputDirectory>../../</outputDirectory>
+                        </configuration>
+                        <executions>
+                            <execution>
+                                <goals>
+                                    <goal>repackage</goal>
+                                </goals>
+                            </execution>
+                        </executions>
+                    </plugin>
+                    <plugin>
+                            <groupId>com.spotify</groupId>
+                            <artifactId>docker-maven-plugin</artifactId>
+                            <version>0.4.13</version>
+                            <configuration>
+                            <serverId>ibiz-dev</serverId>
+                            <imageName>${docker.image.prefix}/${project.artifactId}:latest</imageName>
+                            <dockerDirectory>${project.basedir}/src/main/docker</dockerDirectory>
+                            <resources>
+                                <resource>
+                                    <targetPath>/</targetPath>
+                                    <directory>../../</directory>
+                                    <include>${project.artifactId}.jar</include>
+                                </resource>
+                            </resources>
+                            </configuration>
+                    </plugin>
+                </plugins>
+            </build>
+        </profile>
+    </profiles>
+
+</project>
+

ehr-app/ehr-app-ehr/src/main/docker/Dockerfile

+
+FROM openjdk:8-jre-alpine
+
+ENV SPRING_OUTPUT_ANSI_ENABLED=ALWAYS \
+    IBZ_SLEEP=0 \
+    JAVA_OPTS=""
+
+CMD echo "The application will start in ${IBZ_SLEEP}s..." && \
+    sleep ${IBZ_SLEEP} && \
+    java ${JAVA_OPTS} -Djava.security.egd=file:/dev/./urandom -jar /ehr-app-ehr.jar
+
+EXPOSE 8080
+
+ADD ehr-app-ehr.jar /ehr-app-ehr.jar

ehr-app/ehr-app-ehr/src/main/docker/ehr-app-ehr.yaml

+version: "3.2"
+services:
+  ehr-app-ehr:
+    image: registry.cn-shanghai.aliyuncs.com/ibizsys/ehr-app-ehr:latest
+    ports:
+      - "8080:8080"
+    networks:
+      - agent_network
+    deploy:
+      mode: replicated
+      replicas: 1
+
+networks:
+  agent_network:
+    driver: overlay
+    attachable: true
\ No newline at end of file

ehr-app/ehr-app-ehr/src/main/java/cn/ibizlab/ehr/ehr/EHRApplication.java

+package cn.ibizlab.ehr.ehr;
+
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.boot.autoconfigure.SpringBootApplication;
+import org.springframework.cloud.client.discovery.EnableDiscoveryClient;
+import org.springframework.cloud.netflix.zuul.EnableZuulProxy;
+import org.springframework.cloud.openfeign.EnableFeignClients;
+import org.springframework.cloud.openfeign.FeignClientsConfiguration;
+import org.springframework.context.annotation.ComponentScan;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.context.annotation.Import;
+import org.mybatis.spring.annotation.MapperScan;
+import org.springframework.boot.SpringApplication;
+import org.springframework.web.method.support.HandlerMethodArgumentResolver;
+import org.springframework.web.servlet.config.annotation.WebMvcConfigurerAdapter;
+import java.util.List;
+
+@Slf4j
+@Import({
+    FeignClientsConfiguration.class
+})
+@EnableDiscoveryClient
+@Configuration
+@EnableFeignClients(basePackages = {"cn.ibizlab.ehr" })
+@EnableZuulProxy
+@ComponentScan(basePackages = {"cn.ibizlab.ehr"})
+@MapperScan("cn.ibizlab.ehr.*.mapper")
+@SpringBootApplication(exclude = {
+        org.springframework.boot.autoconfigure.security.servlet.SecurityAutoConfiguration.class,
+})
+public class EHRApplication extends WebMvcConfigurerAdapter{
+
+    public static void main(String[] args) {
+        SpringApplication.run(EHRApplication.class,args);
+    }
+
+    @Override
+    public void addArgumentResolvers(List<HandlerMethodArgumentResolver> argumentResolvers) {
+        super.addArgumentResolvers(argumentResolvers);
+        argumentResolvers.add(new cn.ibizlab.ehr.util.web.SearchContextHandlerMethodArgumentResolver());
+    }
+}

ehr-app/ehr-app-ehr/src/main/java/cn/ibizlab/ehr/ehr/config/EHRSecurityConfig.java

+package cn.ibizlab.ehr.ehr.config;
+
+import cn.ibizlab.ehr.util.security.AuthenticationEntryPoint;
+import cn.ibizlab.ehr.util.security.AuthorizationTokenFilter;
+import cn.ibizlab.ehr.util.service.AuthenticationUserService;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.beans.factory.annotation.Value;
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.http.HttpMethod;
+import org.springframework.security.authentication.AuthenticationManager;
+import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
+import org.springframework.security.config.annotation.method.configuration.EnableGlobalMethodSecurity;
+import org.springframework.security.config.annotation.web.builders.HttpSecurity;
+import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
+import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
+import org.springframework.security.config.core.GrantedAuthorityDefaults;
+import org.springframework.security.config.http.SessionCreationPolicy;
+import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
+import org.springframework.security.crypto.password.PasswordEncoder;
+import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter;
+import org.springframework.context.annotation.Profile;
+import org.springframework.beans.factory.annotation.Qualifier;
+
+@Profile("ehr-prod")
+@Configuration
+@EnableWebSecurity
+public class EHRSecurityConfig extends WebSecurityConfigurerAdapter {
+
+    @Autowired
+    private AuthenticationEntryPoint unauthorizedHandler;
+
+    @Autowired
+    private AuthenticationUserService userDetailsService;
+
+    /**
+     * 自定义基于JWT的安全过滤器
+     */
+    @Autowired
+    AuthorizationTokenFilter authenticationTokenFilter;
+
+    @Value("${ibiz.auth.path:v7/login}")
+    private String loginPath;
+
+    @Value("${ibiz.file.uploadpath:ibizutil/upload}")
+    private String uploadpath;
+
+    @Value("${ibiz.file.downloadpath:ibizutil/download}")
+    private String downloadpath;
+
+    @Value("${ibiz.file.previewpath:ibizutil/preview}")
+    private String previewpath;
+
+    @Autowired
+    public void configureGlobal(AuthenticationManagerBuilder auth) throws Exception {
+        auth
+                .userDetailsService(userDetailsService)
+                .passwordEncoder(passwordEncoderBean());
+    }
+
+    @Bean
+    GrantedAuthorityDefaults grantedAuthorityDefaults() {
+        // Remove the ROLE_ prefix
+        return new GrantedAuthorityDefaults("");
+    }
+
+    @Bean
+    public PasswordEncoder passwordEncoderBean() {
+        return new BCryptPasswordEncoder();
+    }
+
+    @Bean
+    @Override
+    public AuthenticationManager authenticationManagerBean() throws Exception {
+        return super.authenticationManagerBean();
+    }
+
+    @Override
+    protected void configure(HttpSecurity httpSecurity) throws Exception {
+
+        httpSecurity
+
+                // 禁用 CSRF
+                .csrf().disable()
+
+                // 授权异常
+                .exceptionHandling().authenticationEntryPoint(unauthorizedHandler).and()
+
+                // 不创建会话
+                .sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS).and()
+
+                // 过滤请求
+                .authorizeRequests()
+                .antMatchers(
+                        HttpMethod.GET,
+                        "/*.html",
+                        "/**/*.html",
+                        "/**/*.css",
+                        "/**/*.js",
+                        "/**/*.ico",
+                        "/**/assets/**",
+                        "/**/css/**",
+                        "/**/fonts/**",
+                        "/**/js/**",
+                        "/**/img/**",
+                        "/"
+                ).permitAll()
+                //放行登录请求
+                .antMatchers( HttpMethod.POST,"/"+loginPath).permitAll()
+                // 文件操作
+                .antMatchers("/"+downloadpath+"/**").permitAll()
+                .antMatchers("/"+uploadpath).permitAll()
+                .antMatchers("/"+previewpath+"/**").permitAll()
+                // 所有请求都需要认证
+                .anyRequest().authenticated()
+                // 防止iframe 造成跨域
+                .and().headers().frameOptions().disable();
+
+        httpSecurity
+                .addFilterBefore(authenticationTokenFilter, UsernamePasswordAuthenticationFilter.class);
+    }
+}

ehr-app/ehr-app-ehr/src/main/resources/application-ehr-dev.yml

+server:
+  port: 8080
\ No newline at end of file

ehr-app/ehr-app-ehr/src/main/resources/application.yml

+spring:
+  profiles:
+    include: sys , ehr-prod
+  application:
+    name: ehr_practice01-ehr

ehr-app/ehr-app-ehrapp/pom.xml

+<?xml version="1.0" encoding="UTF-8"?>
+<project xmlns="http://maven.apache.org/POM/4.0.0"
+         xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
+    <modelVersion>4.0.0</modelVersion>
+    <parent>
+        <artifactId>ehr-app</artifactId>
+        <groupId>cn.ibizlab.ehr</groupId>
+        <version>1.0.0.0</version>
+    </parent>
+
+    <artifactId>ehr-app-ehrapp</artifactId>
+    <name>Ehr Gateway EHRApp</name>
+    <description>Ehr EHRApp</description>
+
+    <dependencies>
+		<dependency>
+			<groupId>cn.ibizlab.ehr</groupId>
+			<artifactId>ehr-util</artifactId>
+			<version>${project.version}</version>
+		</dependency>
+    </dependencies>
+
+
+    <properties>
+        <docker.image.prefix>registry.cn-shanghai.aliyuncs.com/ibizsys</docker.image.prefix>
+    </properties>
+
+
+    <profiles>
+        <profile>
+            <id>ehrapp</id>
+            <build>
+                <resources>
+                    <resource>
+                        <directory>${basedir}/src/main/webapp</directory>
+                        <!--注意此次必须要放在此目录下才能被访问到 -->
+                        <targetPath>META-INF/resources</targetPath>
+                        <includes>
+                            <include>**/**</include>
+                        </includes>
+                    </resource>
+                    <resource>
+                        <directory>${basedir}/src/main/resources</directory>
+                        <includes>
+                            <include>**/**</include>
+                        </includes>
+                    </resource>
+                </resources>
+                <plugins>
+                    <plugin>
+                        <groupId>org.codehaus.mojo</groupId>
+                        <artifactId>exec-maven-plugin</artifactId>
+                        <version>1.6.0</version>
+                        <executions>
+                            <execution>
+                                <id>exec-yarn-run-install</id>
+                                <phase>prepare-package</phase>
+                                <goals>
+                                    <goal>exec</goal>
+                                </goals>
+                                <configuration>
+                                    <executable>yarn</executable>
+                                    <workingDirectory>../../app_EHRApp</workingDirectory>
+                                </configuration>
+                            </execution>
+                            <execution>
+                                <id>exec-yarn-run-build</id>
+                                <phase>prepare-package</phase>
+                                <goals>
+                                    <goal>exec</goal>
+                                </goals>
+                                <configuration>
+                                    <executable>yarn</executable>
+                                    <arguments>
+                                        <argument>build</argument>
+                                    </arguments>
+                                    <workingDirectory>../../app_EHRApp</workingDirectory>
+                                </configuration>
+                            </execution>
+                        </executions>
+                    </plugin>
+
+                    <plugin>
+                        <groupId>org.springframework.boot</groupId>
+                        <artifactId>spring-boot-maven-plugin</artifactId>
+                        <configuration>
+                            <finalName>ehr-app-ehrapp</finalName>
+                            <jvmArguments>-Dfile.encoding=UTF-8</jvmArguments>
+                            <mainClass>cn.ibizlab.ehr.ehrapp.EHRAppApplication</mainClass>
+                            <outputDirectory>../../</outputDirectory>
+                        </configuration>
+                        <executions>
+                            <execution>
+                                <goals>
+                                    <goal>repackage</goal>
+                                </goals>
+                            </execution>
+                        </executions>
+                    </plugin>
+                    <plugin>
+                            <groupId>com.spotify</groupId>
+                            <artifactId>docker-maven-plugin</artifactId>
+                            <version>0.4.13</version>
+                            <configuration>
+                            <serverId>ibiz-dev</serverId>
+                            <imageName>${docker.image.prefix}/${project.artifactId}:latest</imageName>
+                            <dockerDirectory>${project.basedir}/src/main/docker</dockerDirectory>
+                            <resources>
+                                <resource>
+                                    <targetPath>/</targetPath>
+                                    <directory>../../</directory>
+                                    <include>${project.artifactId}.jar</include>
+                                </resource>
+                            </resources>
+                            </configuration>
+                    </plugin>
+                </plugins>
+            </build>
+        </profile>
+    </profiles>
+
+</project>
+

ehr-app/ehr-app-ehrapp/src/main/docker/Dockerfile

+
+FROM openjdk:8-jre-alpine
+
+ENV SPRING_OUTPUT_ANSI_ENABLED=ALWAYS \
+    IBZ_SLEEP=0 \
+    JAVA_OPTS=""
+
+CMD echo "The application will start in ${IBZ_SLEEP}s..." && \
+    sleep ${IBZ_SLEEP} && \
+    java ${JAVA_OPTS} -Djava.security.egd=file:/dev/./urandom -jar /ehr-app-ehrapp.jar
+
+EXPOSE 8080
+
+ADD ehr-app-ehrapp.jar /ehr-app-ehrapp.jar

ehr-app/ehr-app-ehrapp/src/main/docker/ehr-app-ehrapp.yaml

+version: "3.2"
+services:
+  ehr-app-ehrapp:
+    image: registry.cn-shanghai.aliyuncs.com/ibizsys/ehr-app-ehrapp:latest
+    ports:
+      - "8080:8080"
+    networks:
+      - agent_network
+    deploy:
+      mode: replicated
+      replicas: 1
+
+networks:
+  agent_network:
+    driver: overlay
+    attachable: true
\ No newline at end of file

ehr-app/ehr-app-ehrapp/src/main/java/cn/ibizlab/ehr/ehrapp/EHRAppApplication.java

+package cn.ibizlab.ehr.ehrapp;
+
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.boot.autoconfigure.SpringBootApplication;
+import org.springframework.cloud.client.discovery.EnableDiscoveryClient;
+import org.springframework.cloud.netflix.zuul.EnableZuulProxy;
+import org.springframework.cloud.openfeign.EnableFeignClients;
+import org.springframework.cloud.openfeign.FeignClientsConfiguration;
+import org.springframework.context.annotation.ComponentScan;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.context.annotation.Import;
+import org.mybatis.spring.annotation.MapperScan;
+import org.springframework.boot.SpringApplication;
+import org.springframework.web.method.support.HandlerMethodArgumentResolver;
+import org.springframework.web.servlet.config.annotation.WebMvcConfigurerAdapter;
+import java.util.List;
+
+@Slf4j
+@Import({
+    FeignClientsConfiguration.class
+})
+@EnableDiscoveryClient
+@Configuration
+@EnableFeignClients(basePackages = {"cn.ibizlab.ehr" })
+@EnableZuulProxy
+@ComponentScan(basePackages = {"cn.ibizlab.ehr"})
+@MapperScan("cn.ibizlab.ehr.*.mapper")
+@SpringBootApplication(exclude = {
+        org.springframework.boot.autoconfigure.security.servlet.SecurityAutoConfiguration.class,
+})
+public class EHRAppApplication extends WebMvcConfigurerAdapter{
+
+    public static void main(String[] args) {
+        SpringApplication.run(EHRAppApplication.class,args);
+    }
+
+    @Override
+    public void addArgumentResolvers(List<HandlerMethodArgumentResolver> argumentResolvers) {
+        super.addArgumentResolvers(argumentResolvers);
+        argumentResolvers.add(new cn.ibizlab.ehr.util.web.SearchContextHandlerMethodArgumentResolver());
+    }
+}

ehr-app/ehr-app-ehrapp/src/main/java/cn/ibizlab/ehr/ehrapp/config/EHRAppSecurityConfig.java

+package cn.ibizlab.ehr.ehrapp.config;
+
+import cn.ibizlab.ehr.util.security.AuthenticationEntryPoint;
+import cn.ibizlab.ehr.util.security.AuthorizationTokenFilter;
+import cn.ibizlab.ehr.util.service.AuthenticationUserService;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.beans.factory.annotation.Value;
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.http.HttpMethod;
+import org.springframework.security.authentication.AuthenticationManager;
+import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
+import org.springframework.security.config.annotation.method.configuration.EnableGlobalMethodSecurity;
+import org.springframework.security.config.annotation.web.builders.HttpSecurity;
+import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
+import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
+import org.springframework.security.config.core.GrantedAuthorityDefaults;
+import org.springframework.security.config.http.SessionCreationPolicy;
+import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
+import org.springframework.security.crypto.password.PasswordEncoder;
+import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter;
+import org.springframework.context.annotation.Profile;
+import org.springframework.beans.factory.annotation.Qualifier;
+
+@Profile("ehrapp-prod")
+@Configuration
+@EnableWebSecurity
+public class EHRAppSecurityConfig extends WebSecurityConfigurerAdapter {
+
+    @Autowired
+    private AuthenticationEntryPoint unauthorizedHandler;
+
+    @Autowired
+    private AuthenticationUserService userDetailsService;
+
+    /**
+     * 自定义基于JWT的安全过滤器
+     */
+    @Autowired
+    AuthorizationTokenFilter authenticationTokenFilter;
+
+    @Value("${ibiz.auth.path:v7/login}")
+    private String loginPath;
+
+    @Value("${ibiz.file.uploadpath:ibizutil/upload}")
+    private String uploadpath;
+
+    @Value("${ibiz.file.downloadpath:ibizutil/download}")
+    private String downloadpath;
+
+    @Value("${ibiz.file.previewpath:ibizutil/preview}")
+    private String previewpath;
+
+    @Autowired
+    public void configureGlobal(AuthenticationManagerBuilder auth) throws Exception {
+        auth
+                .userDetailsService(userDetailsService)
+                .passwordEncoder(passwordEncoderBean());
+    }
+
+    @Bean
+    GrantedAuthorityDefaults grantedAuthorityDefaults() {
+        // Remove the ROLE_ prefix
+        return new GrantedAuthorityDefaults("");
+    }
+
+    @Bean
+    public PasswordEncoder passwordEncoderBean() {
+        return new BCryptPasswordEncoder();
+    }
+
+    @Bean
+    @Override
+    public AuthenticationManager authenticationManagerBean() throws Exception {
+        return super.authenticationManagerBean();
+    }
+
+    @Override
+    protected void configure(HttpSecurity httpSecurity) throws Exception {
+
+        httpSecurity
+
+                // 禁用 CSRF
+                .csrf().disable()
+
+                // 授权异常
+                .exceptionHandling().authenticationEntryPoint(unauthorizedHandler).and()
+
+                // 不创建会话
+                .sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS).and()
+
+                // 过滤请求
+                .authorizeRequests()
+                .antMatchers(
+                        HttpMethod.GET,
+                        "/*.html",
+                        "/**/*.html",
+                        "/**/*.css",
+                        "/**/*.js",
+                        "/**/*.ico",
+                        "/**/assets/**",
+                        "/**/css/**",
+                        "/**/fonts/**",
+                        "/**/js/**",
+                        "/**/img/**",
+                        "/"
+                ).permitAll()
+                //放行登录请求
+                .antMatchers( HttpMethod.POST,"/"+loginPath).permitAll()
+                // 文件操作
+                .antMatchers("/"+downloadpath+"/**").permitAll()
+                .antMatchers("/"+uploadpath).permitAll()
+                .antMatchers("/"+previewpath+"/**").permitAll()
+                // 所有请求都需要认证
+                .anyRequest().authenticated()
+                // 防止iframe 造成跨域
+                .and().headers().frameOptions().disable();
+
+        httpSecurity
+                .addFilterBefore(authenticationTokenFilter, UsernamePasswordAuthenticationFilter.class);
+    }
+}

ehr-app/ehr-app-ehrapp/src/main/resources/application-ehrapp-dev.yml

+server:
+  port: 8080
\ No newline at end of file

ehr-app/ehr-app-ehrapp/src/main/resources/application-ehrapp-prod.yml

+server:
+  port: 8080
+
+#zuul网关路由设置
+zuul:
+  routes:
+    pimexitandentry:
+      path: /pimexitandentries/**
+      serviceId: ehr_practice01-webapi
+      stripPrefix: false
+    wfcore:
+      path: /wfcore/**
+      serviceId: ibzwf-api
+      stripPrefix: true
+  sensitive-headers:
+    - Cookie,Set-Cookie,Authorization

ehr-app/ehr-app-ehrapp/src/main/resources/application.yml

+spring:
+  profiles:
+    include: sys , ehrapp-prod
+  application:
+    name: ehr_practice01-ehrapp

ehr-app/ehr-app-ehrhelp/pom.xml

+<?xml version="1.0" encoding="UTF-8"?>
+<project xmlns="http://maven.apache.org/POM/4.0.0"
+         xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
+    <modelVersion>4.0.0</modelVersion>
+    <parent>
+        <artifactId>ehr-app</artifactId>
+        <groupId>cn.ibizlab.ehr</groupId>
+        <version>1.0.0.0</version>
+    </parent>
+
+    <artifactId>ehr-app-ehrhelp</artifactId>
+    <name>Ehr Gateway EHRHelp</name>
+    <description>Ehr EHRHelp</description>
+
+    <dependencies>
+		<dependency>
+			<groupId>cn.ibizlab.ehr</groupId>
+			<artifactId>ehr-util</artifactId>
+			<version>${project.version}</version>
+		</dependency>
+    </dependencies>
+
+
+    <properties>
+        <docker.image.prefix>registry.cn-shanghai.aliyuncs.com/ibizsys</docker.image.prefix>
+    </properties>
+
+
+    <profiles>
+        <profile>
+            <id>ehrhelp</id>
+            <build>
+                <resources>
+                    <resource>
+                        <directory>${basedir}/src/main/webapp</directory>
+                        <!--注意此次必须要放在此目录下才能被访问到 -->
+                        <targetPath>META-INF/resources</targetPath>
+                        <includes>
+                            <include>**/**</include>
+                        </includes>
+                    </resource>
+                    <resource>
+                        <directory>${basedir}/src/main/resources</directory>
+                        <includes>
+                            <include>**/**</include>
+                        </includes>
+                    </resource>
+                </resources>
+                <plugins>
+                    <plugin>
+                        <groupId>org.codehaus.mojo</groupId>
+                        <artifactId>exec-maven-plugin</artifactId>
+                        <version>1.6.0</version>
+                        <executions>
+                            <execution>
+                                <id>exec-yarn-run-install</id>
+                                <phase>prepare-package</phase>
+                                <goals>
+                                    <goal>exec</goal>
+                                </goals>
+                                <configuration>
+                                    <executable>yarn</executable>
+                                    <workingDirectory>../../app_EHRHelp</workingDirectory>
+                                </configuration>
+                            </execution>
+                            <execution>
+                                <id>exec-yarn-run-build</id>
+                                <phase>prepare-package</phase>
+                                <goals>
+                                    <goal>exec</goal>
+                                </goals>
+                                <configuration>
+                                    <executable>yarn</executable>
+                                    <arguments>
+                                        <argument>build</argument>
+                                    </arguments>
+                                    <workingDirectory>../../app_EHRHelp</workingDirectory>
+                                </configuration>
+                            </execution>
+                        </executions>
+                    </plugin>
+
+                    <plugin>
+                        <groupId>org.springframework.boot</groupId>
+                        <artifactId>spring-boot-maven-plugin</artifactId>
+                        <configuration>
+                            <finalName>ehr-app-ehrhelp</finalName>
+                            <jvmArguments>-Dfile.encoding=UTF-8</jvmArguments>
+                            <mainClass>cn.ibizlab.ehr.ehrhelp.EHRHelpApplication</mainClass>
+                            <outputDirectory>../../</outputDirectory>
+                        </configuration>
+                        <executions>
+                            <execution>
+                                <goals>
+                                    <goal>repackage</goal>
+                                </goals>
+                            </execution>
+                        </executions>
+                    </plugin>
+                    <plugin>
+                            <groupId>com.spotify</groupId>
+                            <artifactId>docker-maven-plugin</artifactId>
+                            <version>0.4.13</version>
+                            <configuration>
+                            <serverId>ibiz-dev</serverId>
+                            <imageName>${docker.image.prefix}/${project.artifactId}:latest</imageName>
+                            <dockerDirectory>${project.basedir}/src/main/docker</dockerDirectory>
+                            <resources>
+                                <resource>
+                                    <targetPath>/</targetPath>
+                                    <directory>../../</directory>
+                                    <include>${project.artifactId}.jar</include>
+                                </resource>
+                            </resources>
+                            </configuration>
+                    </plugin>
+                </plugins>
+            </build>
+        </profile>
+    </profiles>
+
+</project>
+

ehr-app/ehr-app-ehrhelp/src/main/docker/Dockerfile

+
+FROM openjdk:8-jre-alpine
+
+ENV SPRING_OUTPUT_ANSI_ENABLED=ALWAYS \
+    IBZ_SLEEP=0 \
+    JAVA_OPTS=""
+
+CMD echo "The application will start in ${IBZ_SLEEP}s..." && \
+    sleep ${IBZ_SLEEP} && \
+    java ${JAVA_OPTS} -Djava.security.egd=file:/dev/./urandom -jar /ehr-app-ehrhelp.jar
+
+EXPOSE 8080
+
+ADD ehr-app-ehrhelp.jar /ehr-app-ehrhelp.jar

ehr-app/ehr-app-ehrhelp/src/main/docker/ehr-app-ehrhelp.yaml

+version: "3.2"
+services:
+  ehr-app-ehrhelp:
+    image: registry.cn-shanghai.aliyuncs.com/ibizsys/ehr-app-ehrhelp:latest
+    ports:
+      - "8080:8080"
+    networks:
+      - agent_network
+    deploy:
+      mode: replicated
+      replicas: 1
+
+networks:
+  agent_network:
+    driver: overlay
+    attachable: true
\ No newline at end of file

ehr-app/ehr-app-ehrhelp/src/main/java/cn/ibizlab/ehr/ehrhelp/EHRHelpApplication.java

+package cn.ibizlab.ehr.ehrhelp;
+
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.boot.autoconfigure.SpringBootApplication;
+import org.springframework.cloud.client.discovery.EnableDiscoveryClient;
+import org.springframework.cloud.netflix.zuul.EnableZuulProxy;
+import org.springframework.cloud.openfeign.EnableFeignClients;
+import org.springframework.cloud.openfeign.FeignClientsConfiguration;
+import org.springframework.context.annotation.ComponentScan;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.context.annotation.Import;
+import org.mybatis.spring.annotation.MapperScan;
+import org.springframework.boot.SpringApplication;
+import org.springframework.web.method.support.HandlerMethodArgumentResolver;
+import org.springframework.web.servlet.config.annotation.WebMvcConfigurerAdapter;
+import java.util.List;
+
+@Slf4j
+@Import({
+    FeignClientsConfiguration.class
+})
+@EnableDiscoveryClient
+@Configuration
+@EnableFeignClients(basePackages = {"cn.ibizlab.ehr" })
+@EnableZuulProxy
+@ComponentScan(basePackages = {"cn.ibizlab.ehr"})
+@MapperScan("cn.ibizlab.ehr.*.mapper")
+@SpringBootApplication(exclude = {
+        org.springframework.boot.autoconfigure.security.servlet.SecurityAutoConfiguration.class,
+})
+public class EHRHelpApplication extends WebMvcConfigurerAdapter{
+
+    public static void main(String[] args) {
+        SpringApplication.run(EHRHelpApplication.class,args);
+    }
+
+    @Override
+    public void addArgumentResolvers(List<HandlerMethodArgumentResolver> argumentResolvers) {
+        super.addArgumentResolvers(argumentResolvers);
+        argumentResolvers.add(new cn.ibizlab.ehr.util.web.SearchContextHandlerMethodArgumentResolver());
+    }
+}

ehr-app/ehr-app-ehrhelp/src/main/java/cn/ibizlab/ehr/ehrhelp/config/EHRHelpSecurityConfig.java

+package cn.ibizlab.ehr.ehrhelp.config;
+
+import cn.ibizlab.ehr.util.security.AuthenticationEntryPoint;
+import cn.ibizlab.ehr.util.security.AuthorizationTokenFilter;
+import cn.ibizlab.ehr.util.service.AuthenticationUserService;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.beans.factory.annotation.Value;
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.http.HttpMethod;
+import org.springframework.security.authentication.AuthenticationManager;
+import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
+import org.springframework.security.config.annotation.method.configuration.EnableGlobalMethodSecurity;
+import org.springframework.security.config.annotation.web.builders.HttpSecurity;
+import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
+import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
+import org.springframework.security.config.core.GrantedAuthorityDefaults;
+import org.springframework.security.config.http.SessionCreationPolicy;
+import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
+import org.springframework.security.crypto.password.PasswordEncoder;
+import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter;
+import org.springframework.context.annotation.Profile;
+import org.springframework.beans.factory.annotation.Qualifier;
+
+@Profile("ehrhelp-prod")
+@Configuration
+@EnableWebSecurity
+public class EHRHelpSecurityConfig extends WebSecurityConfigurerAdapter {
+
+    @Autowired
+    private AuthenticationEntryPoint unauthorizedHandler;
+
+    @Autowired
+    private AuthenticationUserService userDetailsService;
+
+    /**
+     * 自定义基于JWT的安全过滤器
+     */
+    @Autowired
+    AuthorizationTokenFilter authenticationTokenFilter;
+
+    @Value("${ibiz.auth.path:v7/login}")
+    private String loginPath;
+
+    @Value("${ibiz.file.uploadpath:ibizutil/upload}")
+    private String uploadpath;
+
+    @Value("${ibiz.file.downloadpath:ibizutil/download}")
+    private String downloadpath;
+
+    @Value("${ibiz.file.previewpath:ibizutil/preview}")
+    private String previewpath;
+
+    @Autowired
+    public void configureGlobal(AuthenticationManagerBuilder auth) throws Exception {
+        auth
+                .userDetailsService(userDetailsService)
+                .passwordEncoder(passwordEncoderBean());
+    }
+
+    @Bean
+    GrantedAuthorityDefaults grantedAuthorityDefaults() {
+        // Remove the ROLE_ prefix
+        return new GrantedAuthorityDefaults("");
+    }
+
+    @Bean
+    public PasswordEncoder passwordEncoderBean() {
+        return new BCryptPasswordEncoder();
+    }
+
+    @Bean
+    @Override
+    public AuthenticationManager authenticationManagerBean() throws Exception {
+        return super.authenticationManagerBean();
+    }
+
+    @Override
+    protected void configure(HttpSecurity httpSecurity) throws Exception {
+
+        httpSecurity
+
+                // 禁用 CSRF
+                .csrf().disable()
+
+                // 授权异常
+                .exceptionHandling().authenticationEntryPoint(unauthorizedHandler).and()
+
+                // 不创建会话
+                .sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS).and()
+
+                // 过滤请求
+                .authorizeRequests()
+                .antMatchers(
+                        HttpMethod.GET,
+                        "/*.html",
+                        "/**/*.html",
+                        "/**/*.css",
+                        "/**/*.js",
+                        "/**/*.ico",
+                        "/**/assets/**",
+                        "/**/css/**",
+                        "/**/fonts/**",
+                        "/**/js/**",
+                        "/**/img/**",
+                        "/"
+                ).permitAll()
+                //放行登录请求
+                .antMatchers( HttpMethod.POST,"/"+loginPath).permitAll()
+                // 文件操作
+                .antMatchers("/"+downloadpath+"/**").permitAll()
+                .antMatchers("/"+uploadpath).permitAll()
+                .antMatchers("/"+previewpath+"/**").permitAll()
+                // 所有请求都需要认证
+                .anyRequest().authenticated()
+                // 防止iframe 造成跨域
+                .and().headers().frameOptions().disable();
+
+        httpSecurity
+                .addFilterBefore(authenticationTokenFilter, UsernamePasswordAuthenticationFilter.class);
+    }
+}

ehr-app/ehr-app-ehrhelp/src/main/resources/application-ehrhelp-dev.yml

+server:
+  port: 8080
\ No newline at end of file

ehr-app/ehr-app-ehrhelp/src/main/resources/application.yml

+spring:
+  profiles:
+    include: sys , ehrhelp-prod
+  application:
+    name: ehr_practice01-ehrhelp

ehr-app/ehr-app-ehrmob/pom.xml

+<?xml version="1.0" encoding="UTF-8"?>
+<project xmlns="http://maven.apache.org/POM/4.0.0"
+         xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
+    <modelVersion>4.0.0</modelVersion>
+    <parent>
+        <artifactId>ehr-app</artifactId>
+        <groupId>cn.ibizlab.ehr</groupId>
+        <version>1.0.0.0</version>
+    </parent>
+
+    <artifactId>ehr-app-ehrmob</artifactId>
+    <name>Ehr Gateway EHRMob</name>
+    <description>Ehr EHRMob</description>
+
+    <dependencies>
+		<dependency>
+			<groupId>cn.ibizlab.ehr</groupId>
+			<artifactId>ehr-util</artifactId>
+			<version>${project.version}</version>
+		</dependency>
+    </dependencies>
+
+
+    <properties>
+        <docker.image.prefix>registry.cn-shanghai.aliyuncs.com/ibizsys</docker.image.prefix>
+    </properties>
+
+
+    <profiles>
+        <profile>
+            <id>ehrmob</id>
+            <build>
+                <resources>
+                    <resource>
+                        <directory>${basedir}/src/main/webapp</directory>
+                        <!--注意此次必须要放在此目录下才能被访问到 -->
+                        <targetPath>META-INF/resources</targetPath>
+                        <includes>
+                            <include>**/**</include>
+                        </includes>
+                    </resource>
+                    <resource>
+                        <directory>${basedir}/src/main/resources</directory>
+                        <includes>
+                            <include>**/**</include>
+                        </includes>
+                    </resource>
+                </resources>
+                <plugins>
+                    <plugin>
+                        <groupId>org.codehaus.mojo</groupId>
+                        <artifactId>exec-maven-plugin</artifactId>
+                        <version>1.6.0</version>
+                        <executions>
+                            <execution>
+                                <id>exec-yarn-run-install</id>
+                                <phase>prepare-package</phase>
+                                <goals>
+                                    <goal>exec</goal>
+                                </goals>
+                                <configuration>
+                                    <executable>yarn</executable>
+                                    <workingDirectory>../../app_EHRMob</workingDirectory>
+                                </configuration>
+                            </execution>
+                            <execution>
+                                <id>exec-yarn-run-build</id>
+                                <phase>prepare-package</phase>
+                                <goals>
+                                    <goal>exec</goal>
+                                </goals>
+                                <configuration>
+                                    <executable>yarn</executable>
+                                    <arguments>
+                                        <argument>build</argument>
+                                    </arguments>
+                                    <workingDirectory>../../app_EHRMob</workingDirectory>
+                                </configuration>
+                            </execution>
+                        </executions>
+                    </plugin>
+
+                    <plugin>
+                        <groupId>org.springframework.boot</groupId>
+                        <artifactId>spring-boot-maven-plugin</artifactId>
+                        <configuration>
+                            <finalName>ehr-app-ehrmob</finalName>
+                            <jvmArguments>-Dfile.encoding=UTF-8</jvmArguments>
+                            <mainClass>cn.ibizlab.ehr.ehrmob.EHRMobApplication</mainClass>
+                            <outputDirectory>../../</outputDirectory>
+                        </configuration>
+                        <executions>
+                            <execution>
+                                <goals>
+                                    <goal>repackage</goal>
+                                </goals>
+                            </execution>
+                        </executions>
+                    </plugin>
+                    <plugin>
+                            <groupId>com.spotify</groupId>
+                            <artifactId>docker-maven-plugin</artifactId>
+                            <version>0.4.13</version>
+                            <configuration>
+                            <serverId>ibiz-dev</serverId>
+                            <imageName>${docker.image.prefix}/${project.artifactId}:latest</imageName>
+                            <dockerDirectory>${project.basedir}/src/main/docker</dockerDirectory>
+                            <resources>
+                                <resource>
+                                    <targetPath>/</targetPath>
+                                    <directory>../../</directory>
+                                    <include>${project.artifactId}.jar</include>
+                                </resource>
+                            </resources>
+                            </configuration>
+                    </plugin>
+                </plugins>
+            </build>
+        </profile>
+    </profiles>
+
+</project>
+

ehr-app/ehr-app-ehrmob/src/main/docker/Dockerfile

+
+FROM openjdk:8-jre-alpine
+
+ENV SPRING_OUTPUT_ANSI_ENABLED=ALWAYS \
+    IBZ_SLEEP=0 \
+    JAVA_OPTS=""
+
+CMD echo "The application will start in ${IBZ_SLEEP}s..." && \
+    sleep ${IBZ_SLEEP} && \
+    java ${JAVA_OPTS} -Djava.security.egd=file:/dev/./urandom -jar /ehr-app-ehrmob.jar
+
+EXPOSE 8080
+
+ADD ehr-app-ehrmob.jar /ehr-app-ehrmob.jar

ehr-app/ehr-app-ehrmob/src/main/docker/ehr-app-ehrmob.yaml

+version: "3.2"
+services:
+  ehr-app-ehrmob:
+    image: registry.cn-shanghai.aliyuncs.com/ibizsys/ehr-app-ehrmob:latest
+    ports:
+      - "8080:8080"
+    networks:
+      - agent_network
+    deploy:
+      mode: replicated
+      replicas: 1
+
+networks:
+  agent_network:
+    driver: overlay
+    attachable: true
\ No newline at end of file

ehr-app/ehr-app-ehrmob/src/main/java/cn/ibizlab/ehr/ehrmob/EHRMobApplication.java

+package cn.ibizlab.ehr.ehrmob;
+
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.boot.autoconfigure.SpringBootApplication;
+import org.springframework.cloud.client.discovery.EnableDiscoveryClient;
+import org.springframework.cloud.netflix.zuul.EnableZuulProxy;
+import org.springframework.cloud.openfeign.EnableFeignClients;
+import org.springframework.cloud.openfeign.FeignClientsConfiguration;
+import org.springframework.context.annotation.ComponentScan;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.context.annotation.Import;
+import org.mybatis.spring.annotation.MapperScan;
+import org.springframework.boot.SpringApplication;
+import org.springframework.web.method.support.HandlerMethodArgumentResolver;
+import org.springframework.web.servlet.config.annotation.WebMvcConfigurerAdapter;
+import java.util.List;
+
+@Slf4j
+@Import({
+    FeignClientsConfiguration.class
+})
+@EnableDiscoveryClient
+@Configuration
+@EnableFeignClients(basePackages = {"cn.ibizlab.ehr" })
+@EnableZuulProxy
+@ComponentScan(basePackages = {"cn.ibizlab.ehr"})
+@MapperScan("cn.ibizlab.ehr.*.mapper")
+@SpringBootApplication(exclude = {
+        org.springframework.boot.autoconfigure.security.servlet.SecurityAutoConfiguration.class,
+})
+public class EHRMobApplication extends WebMvcConfigurerAdapter{
+
+    public static void main(String[] args) {
+        SpringApplication.run(EHRMobApplication.class,args);
+    }
+
+    @Override
+    public void addArgumentResolvers(List<HandlerMethodArgumentResolver> argumentResolvers) {
+        super.addArgumentResolvers(argumentResolvers);
+        argumentResolvers.add(new cn.ibizlab.ehr.util.web.SearchContextHandlerMethodArgumentResolver());
+    }
+}

ehr-app/ehr-app-ehrmob/src/main/java/cn/ibizlab/ehr/ehrmob/config/EHRMobSecurityConfig.java

+package cn.ibizlab.ehr.ehrmob.config;
+
+import cn.ibizlab.ehr.util.security.AuthenticationEntryPoint;
+import cn.ibizlab.ehr.util.security.AuthorizationTokenFilter;
+import cn.ibizlab.ehr.util.service.AuthenticationUserService;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.beans.factory.annotation.Value;
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.http.HttpMethod;
+import org.springframework.security.authentication.AuthenticationManager;
+import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
+import org.springframework.security.config.annotation.method.configuration.EnableGlobalMethodSecurity;
+import org.springframework.security.config.annotation.web.builders.HttpSecurity;
+import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
+import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
+import org.springframework.security.config.core.GrantedAuthorityDefaults;
+import org.springframework.security.config.http.SessionCreationPolicy;
+import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
+import org.springframework.security.crypto.password.PasswordEncoder;
+import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter;
+import org.springframework.context.annotation.Profile;
+import org.springframework.beans.factory.annotation.Qualifier;
+
+@Profile("ehrmob-prod")
+@Configuration
+@EnableWebSecurity
+public class EHRMobSecurityConfig extends WebSecurityConfigurerAdapter {
+
+    @Autowired
+    private AuthenticationEntryPoint unauthorizedHandler;
+
+    @Autowired
+    private AuthenticationUserService userDetailsService;
+
+    /**
+     * 自定义基于JWT的安全过滤器
+     */
+    @Autowired
+    AuthorizationTokenFilter authenticationTokenFilter;
+
+    @Value("${ibiz.auth.path:v7/login}")
+    private String loginPath;
+
+    @Value("${ibiz.file.uploadpath:ibizutil/upload}")
+    private String uploadpath;
+
+    @Value("${ibiz.file.downloadpath:ibizutil/download}")
+    private String downloadpath;
+
+    @Value("${ibiz.file.previewpath:ibizutil/preview}")
+    private String previewpath;
+
+    @Autowired
+    public void configureGlobal(AuthenticationManagerBuilder auth) throws Exception {
+        auth
+                .userDetailsService(userDetailsService)
+                .passwordEncoder(passwordEncoderBean());
+    }
+
+    @Bean
+    GrantedAuthorityDefaults grantedAuthorityDefaults() {
+        // Remove the ROLE_ prefix
+        return new GrantedAuthorityDefaults("");
+    }
+
+    @Bean
+    public PasswordEncoder passwordEncoderBean() {
+        return new BCryptPasswordEncoder();
+    }
+
+    @Bean
+    @Override
+    public AuthenticationManager authenticationManagerBean() throws Exception {
+        return super.authenticationManagerBean();
+    }
+
+    @Override
+    protected void configure(HttpSecurity httpSecurity) throws Exception {
+
+        httpSecurity
+
+                // 禁用 CSRF
+                .csrf().disable()
+
+                // 授权异常
+                .exceptionHandling().authenticationEntryPoint(unauthorizedHandler).and()
+
+                // 不创建会话
+                .sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS).and()
+
+                // 过滤请求
+                .authorizeRequests()
+                .antMatchers(
+                        HttpMethod.GET,
+                        "/*.html",
+                        "/**/*.html",
+                        "/**/*.css",
+                        "/**/*.js",
+                        "/**/*.ico",
+                        "/**/assets/**",
+                        "/**/css/**",
+                        "/**/fonts/**",
+                        "/**/js/**",
+                        "/**/img/**",
+                        "/"
+                ).permitAll()
+                //放行登录请求
+                .antMatchers( HttpMethod.POST,"/"+loginPath).permitAll()
+                // 文件操作
+                .antMatchers("/"+downloadpath+"/**").permitAll()
+                .antMatchers("/"+uploadpath).permitAll()
+                .antMatchers("/"+previewpath+"/**").permitAll()
+                // 所有请求都需要认证
+                .anyRequest().authenticated()
+                // 防止iframe 造成跨域
+                .and().headers().frameOptions().disable();
+
+        httpSecurity
+                .addFilterBefore(authenticationTokenFilter, UsernamePasswordAuthenticationFilter.class);
+    }
+}

ehr-app/ehr-app-ehrmob/src/main/resources/application-ehrmob-dev.yml

+server:
+  port: 8080
\ No newline at end of file

ehr-app/ehr-app-ehrmob/src/main/resources/application-ehrmob-prod.yml

+server:
+  port: 8080
+
+#zuul网关路由设置
+zuul:
+  routes:
+    pimarchives:
+      path: /pimarchives/**
+      serviceId: ehr_practice01-webapi
+      stripPrefix: false
+    pimperson:
+      path: /pimpeople/**
+      serviceId: ehr_practice01-webapi
+      stripPrefix: false
+    pcmydlzmx:
+      path: /pcmydlzmxes/**
+      serviceId: ehr_practice01-webapi
+      stripPrefix: false
+    pimtitlecatalogue:
+      path: /pimtitlecatalogues/**
+      serviceId: ehr_practice01-webapi
+      stripPrefix: false
+    pimdistirbution:
+      path: /pimdistirbutions/**
+      serviceId: ehr_practice01-webapi
+      stripPrefix: false
+    pimqualtype:
+      path: /pimqualtypes/**
+      serviceId: ehr_practice01-webapi
+      stripPrefix: false
+    pimworkhistory:
+      path: /pimworkhistories/**
+      serviceId: ehr_practice01-webapi
+      stripPrefix: false
+    pimtitle:
+      path: /pimtitles/**
+      serviceId: ehr_practice01-webapi
+      stripPrefix: false
+    pimexitandentry:
+      path: /pimexitandentries/**
+      serviceId: ehr_practice01-webapi
+      stripPrefix: false
+    ormsignorg:
+      path: /ormsignorgs/**
+      serviceId: ehr_practice01-webapi
+      stripPrefix: false
+    pimarchivesrecord:
+      path: /pimarchivesrecords/**
+      serviceId: ehr_practice01-webapi
+      stripPrefix: false
+    vacleavedetail:
+      path: /vacleavedetails/**
+      serviceId: ehr_practice01-webapi
+      stripPrefix: false
+    pimqualmajor:
+      path: /pimqualmajors/**
+      serviceId: ehr_practice01-webapi
+      stripPrefix: false
+    vacleavemanage:
+      path: /vacleavemanages/**
+      serviceId: ehr_practice01-webapi
+      stripPrefix: false
+    pimeducation:
+      path: /pimeducations/**
+      serviceId: ehr_practice01-webapi
+      stripPrefix: false
+    ormorg:
+      path: /ormorgs/**
+      serviceId: ehr_practice01-webapi
+      stripPrefix: false
+    pimfaminfo:
+      path: /pimfaminfos/**
+      serviceId: ehr_practice01-webapi
+      stripPrefix: false
+    pimcontract:
+      path: /pimcontracts/**
+      serviceId: ehr_practice01-webapi
+      stripPrefix: false
+    pimrewardpunishment:
+      path: /pimrewardpunishments/**
+      serviceId: ehr_practice01-webapi
+      stripPrefix: false
+    pimachievements:
+      path: /pimachievements/**
+      serviceId: ehr_practice01-webapi
+      stripPrefix: false
+    ormorgsector:
+      path: /ormorgsectors/**
+      serviceId: ehr_practice01-webapi
+      stripPrefix: false
+    pimvocational:
+      path: /pimvocationals/**
+      serviceId: ehr_practice01-webapi
+      stripPrefix: false
+    pimlanguageability:
+      path: /pimlanguageabilities/**
+      serviceId: ehr_practice01-webapi
+      stripPrefix: false
+    orguser:
+      path: /orgusers/**
+      serviceId: ehr_practice01-webapi
+      stripPrefix: false
+    wfcore:
+      path: /wfcore/**
+      serviceId: ibzwf-api
+      stripPrefix: true
+  sensitive-headers:
+    - Cookie,Set-Cookie,Authorization

ehr-app/ehr-app-ehrmob/src/main/resources/application.yml

+spring:
+  profiles:
+    include: sys , ehrmob-prod
+  application:
+    name: ehr_practice01-ehrmob

ehr-app/ehr-app-ehrorm/pom.xml

+<?xml version="1.0" encoding="UTF-8"?>
+<project xmlns="http://maven.apache.org/POM/4.0.0"
+         xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
+    <modelVersion>4.0.0</modelVersion>
+    <parent>
+        <artifactId>ehr-app</artifactId>
+        <groupId>cn.ibizlab.ehr</groupId>
+        <version>1.0.0.0</version>
+    </parent>
+
+    <artifactId>ehr-app-ehrorm</artifactId>
+    <name>Ehr Gateway EHROrm</name>
+    <description>Ehr EHROrm</description>
+
+    <dependencies>
+		<dependency>
+			<groupId>cn.ibizlab.ehr</groupId>
+			<artifactId>ehr-util</artifactId>
+			<version>${project.version}</version>
+		</dependency>
+    </dependencies>
+
+
+    <properties>
+        <docker.image.prefix>registry.cn-shanghai.aliyuncs.com/ibizsys</docker.image.prefix>
+    </properties>
+
+
+    <profiles>
+        <profile>
+            <id>ehrorm</id>
+            <build>
+                <resources>
+                    <resource>
+                        <directory>${basedir}/src/main/webapp</directory>
+                        <!--注意此次必须要放在此目录下才能被访问到 -->
+                        <targetPath>META-INF/resources</targetPath>
+                        <includes>
+                            <include>**/**</include>
+                        </includes>
+                    </resource>
+                    <resource>
+                        <directory>${basedir}/src/main/resources</directory>
+                        <includes>
+                            <include>**/**</include>
+                        </includes>
+                    </resource>
+                </resources>
+                <plugins>
+                    <plugin>
+                        <groupId>org.codehaus.mojo</groupId>
+                        <artifactId>exec-maven-plugin</artifactId>
+                        <version>1.6.0</version>
+                        <executions>
+                            <execution>
+                                <id>exec-yarn-run-install</id>
+                                <phase>prepare-package</phase>
+                                <goals>
+                                    <goal>exec</goal>
+                                </goals>
+                                <configuration>
+                                    <executable>yarn</executable>
+                                    <workingDirectory>../../app_EHROrm</workingDirectory>
+                                </configuration>
+                            </execution>
+                            <execution>
+                                <id>exec-yarn-run-build</id>
+                                <phase>prepare-package</phase>
+                                <goals>
+                                    <goal>exec</goal>
+                                </goals>
+                                <configuration>
+                                    <executable>yarn</executable>
+                                    <arguments>
+                                        <argument>build</argument>
+                                    </arguments>
+                                    <workingDirectory>../../app_EHROrm</workingDirectory>
+                                </configuration>
+                            </execution>
+                        </executions>
+                    </plugin>
+
+                    <plugin>
+                        <groupId>org.springframework.boot</groupId>
+                        <artifactId>spring-boot-maven-plugin</artifactId>
+                        <configuration>
+                            <finalName>ehr-app-ehrorm</finalName>
+                            <jvmArguments>-Dfile.encoding=UTF-8</jvmArguments>
+                            <mainClass>cn.ibizlab.ehr.ehrorm.EHROrmApplication</mainClass>
+                            <outputDirectory>../../</outputDirectory>
+                        </configuration>
+                        <executions>
+                            <execution>
+                                <goals>
+                                    <goal>repackage</goal>
+                                </goals>
+                            </execution>
+                        </executions>
+                    </plugin>
+                    <plugin>
+                            <groupId>com.spotify</groupId>
+                            <artifactId>docker-maven-plugin</artifactId>
+                            <version>0.4.13</version>
+                            <configuration>
+                            <serverId>ibiz-dev</serverId>
+                            <imageName>${docker.image.prefix}/${project.artifactId}:latest</imageName>
+                            <dockerDirectory>${project.basedir}/src/main/docker</dockerDirectory>
+                            <resources>
+                                <resource>
+                                    <targetPath>/</targetPath>
+                                    <directory>../../</directory>
+                                    <include>${project.artifactId}.jar</include>
+                                </resource>
+                            </resources>
+                            </configuration>
+                    </plugin>
+                </plugins>
+            </build>
+        </profile>
+    </profiles>
+
+</project>
+

ehr-app/ehr-app-ehrorm/src/main/docker/Dockerfile

+
+FROM openjdk:8-jre-alpine
+
+ENV SPRING_OUTPUT_ANSI_ENABLED=ALWAYS \
+    IBZ_SLEEP=0 \
+    JAVA_OPTS=""
+
+CMD echo "The application will start in ${IBZ_SLEEP}s..." && \
+    sleep ${IBZ_SLEEP} && \
+    java ${JAVA_OPTS} -Djava.security.egd=file:/dev/./urandom -jar /ehr-app-ehrorm.jar
+
+EXPOSE 8080
+
+ADD ehr-app-ehrorm.jar /ehr-app-ehrorm.jar

ehr-app/ehr-app-ehrorm/src/main/docker/ehr-app-ehrorm.yaml

+version: "3.2"
+services:
+  ehr-app-ehrorm:
+    image: registry.cn-shanghai.aliyuncs.com/ibizsys/ehr-app-ehrorm:latest
+    ports:
+      - "8080:8080"
+    networks:
+      - agent_network
+    deploy:
+      mode: replicated
+      replicas: 1
+
+networks:
+  agent_network:
+    driver: overlay
+    attachable: true
\ No newline at end of file

ehr-app/ehr-app-ehrorm/src/main/java/cn/ibizlab/ehr/ehrorm/EHROrmApplication.java

+package cn.ibizlab.ehr.ehrorm;
+
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.boot.autoconfigure.SpringBootApplication;
+import org.springframework.cloud.client.discovery.EnableDiscoveryClient;
+import org.springframework.cloud.netflix.zuul.EnableZuulProxy;
+import org.springframework.cloud.openfeign.EnableFeignClients;
+import org.springframework.cloud.openfeign.FeignClientsConfiguration;
+import org.springframework.context.annotation.ComponentScan;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.context.annotation.Import;
+import org.mybatis.spring.annotation.MapperScan;
+import org.springframework.boot.SpringApplication;
+import org.springframework.web.method.support.HandlerMethodArgumentResolver;
+import org.springframework.web.servlet.config.annotation.WebMvcConfigurerAdapter;
+import java.util.List;
+
+@Slf4j
+@Import({
+    FeignClientsConfiguration.class
+})
+@EnableDiscoveryClient
+@Configuration
+@EnableFeignClients(basePackages = {"cn.ibizlab.ehr" })
+@EnableZuulProxy
+@ComponentScan(basePackages = {"cn.ibizlab.ehr"})
+@MapperScan("cn.ibizlab.ehr.*.mapper")
+@SpringBootApplication(exclude = {
+        org.springframework.boot.autoconfigure.security.servlet.SecurityAutoConfiguration.class,
+})
+public class EHROrmApplication extends WebMvcConfigurerAdapter{
+
+    public static void main(String[] args) {
+        SpringApplication.run(EHROrmApplication.class,args);
+    }
+
+    @Override
+    public void addArgumentResolvers(List<HandlerMethodArgumentResolver> argumentResolvers) {
+        super.addArgumentResolvers(argumentResolvers);
+        argumentResolvers.add(new cn.ibizlab.ehr.util.web.SearchContextHandlerMethodArgumentResolver());
+    }
+}

ehr-app/ehr-app-ehrorm/src/main/java/cn/ibizlab/ehr/ehrorm/config/EHROrmSecurityConfig.java

+package cn.ibizlab.ehr.ehrorm.config;
+
+import cn.ibizlab.ehr.util.security.AuthenticationEntryPoint;
+import cn.ibizlab.ehr.util.security.AuthorizationTokenFilter;
+import cn.ibizlab.ehr.util.service.AuthenticationUserService;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.beans.factory.annotation.Value;
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.http.HttpMethod;
+import org.springframework.security.authentication.AuthenticationManager;
+import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
+import org.springframework.security.config.annotation.method.configuration.EnableGlobalMethodSecurity;
+import org.springframework.security.config.annotation.web.builders.HttpSecurity;
+import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
+import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
+import org.springframework.security.config.core.GrantedAuthorityDefaults;
+import org.springframework.security.config.http.SessionCreationPolicy;
+import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
+import org.springframework.security.crypto.password.PasswordEncoder;
+import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter;
+import org.springframework.context.annotation.Profile;
+import org.springframework.beans.factory.annotation.Qualifier;
+
+@Profile("ehrorm-prod")
+@Configuration
+@EnableWebSecurity
+public class EHROrmSecurityConfig extends WebSecurityConfigurerAdapter {
+
+    @Autowired
+    private AuthenticationEntryPoint unauthorizedHandler;
+
+    @Autowired
+    private AuthenticationUserService userDetailsService;
+
+    /**
+     * 自定义基于JWT的安全过滤器
+     */
+    @Autowired
+    AuthorizationTokenFilter authenticationTokenFilter;
+
+    @Value("${ibiz.auth.path:v7/login}")
+    private String loginPath;
+
+    @Value("${ibiz.file.uploadpath:ibizutil/upload}")
+    private String uploadpath;
+
+    @Value("${ibiz.file.downloadpath:ibizutil/download}")
+    private String downloadpath;
+
+    @Value("${ibiz.file.previewpath:ibizutil/preview}")
+    private String previewpath;
+
+    @Autowired
+    public void configureGlobal(AuthenticationManagerBuilder auth) throws Exception {
+        auth
+                .userDetailsService(userDetailsService)
+                .passwordEncoder(passwordEncoderBean());
+    }
+
+    @Bean
+    GrantedAuthorityDefaults grantedAuthorityDefaults() {
+        // Remove the ROLE_ prefix
+        return new GrantedAuthorityDefaults("");
+    }
+
+    @Bean
+    public PasswordEncoder passwordEncoderBean() {
+        return new BCryptPasswordEncoder();
+    }
+
+    @Bean
+    @Override
+    public AuthenticationManager authenticationManagerBean() throws Exception {
+        return super.authenticationManagerBean();
+    }
+
+    @Override
+    protected void configure(HttpSecurity httpSecurity) throws Exception {
+
+        httpSecurity
+
+                // 禁用 CSRF
+                .csrf().disable()
+
+                // 授权异常
+                .exceptionHandling().authenticationEntryPoint(unauthorizedHandler).and()
+
+                // 不创建会话
+                .sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS).and()
+
+                // 过滤请求
+                .authorizeRequests()
+                .antMatchers(
+                        HttpMethod.GET,
+                        "/*.html",
+                        "/**/*.html",
+                        "/**/*.css",
+                        "/**/*.js",
+                        "/**/*.ico",
+                        "/**/assets/**",
+                        "/**/css/**",
+                        "/**/fonts/**",
+                        "/**/js/**",
+                        "/**/img/**",
+                        "/"
+                ).permitAll()
+                //放行登录请求
+                .antMatchers( HttpMethod.POST,"/"+loginPath).permitAll()
+                // 文件操作
+                .antMatchers("/"+downloadpath+"/**").permitAll()
+                .antMatchers("/"+uploadpath).permitAll()
+                .antMatchers("/"+previewpath+"/**").permitAll()
+                // 所有请求都需要认证
+                .anyRequest().authenticated()
+                // 防止iframe 造成跨域
+                .and().headers().frameOptions().disable();
+
+        httpSecurity
+                .addFilterBefore(authenticationTokenFilter, UsernamePasswordAuthenticationFilter.class);
+    }
+}

ehr-app/ehr-app-ehrorm/src/main/resources/application-ehrorm-dev.yml

+server:
+  port: 8080
\ No newline at end of file

ehr-app/ehr-app-ehrorm/src/main/resources/application-ehrorm-prod.yml

+server:
+  port: 8080
+
+#zuul网关路由设置
+zuul:
+  routes:
+    ormqygl:
+      path: /ormqygls/**
+      serviceId: ehr_practice01-webapi
+      stripPrefix: false
+    ormpostdetails:
+      path: /ormpostdetails/**
+      serviceId: ehr_practice01-webapi
+      stripPrefix: false
+    ormsignorg:
+      path: /ormsignorgs/**
+      serviceId: ehr_practice01-webapi
+      stripPrefix: false
+    ormerporg:
+      path: /ormerporgs/**
+      serviceId: ehr_practice01-webapi
+      stripPrefix: false
+    ormxmbmx:
+      path: /ormxmbmxes/**
+      serviceId: ehr_practice01-webapi
+      stripPrefix: false
+    ormorginfo:
+      path: /ormorginfos/**
+      serviceId: ehr_practice01-webapi
+      stripPrefix: false
+    ormedition:
+      path: /ormeditions/**
+      serviceId: ehr_practice01-webapi
+      stripPrefix: false
+    ormorgdz:
+      path: /ormorgdzs/**
+      serviceId: ehr_practice01-webapi
+      stripPrefix: false
+    contractsignorg:
+      path: /contractsignorgs/**
+      serviceId: ehr_practice01-webapi
+      stripPrefix: false
+    ormpost:
+      path: /ormposts/**
+      serviceId: ehr_practice01-webapi
+      stripPrefix: false
+    ormbmkqdz:
+      path: /ormbmkqdzs/**
+      serviceId: ehr_practice01-webapi
+      stripPrefix: false
+    ormbmgwbz:
+      path: /ormbmgwbzs/**
+      serviceId: ehr_practice01-webapi
+      stripPrefix: false
+    ormrelation:
+      path: /ormrelations/**
+      serviceId: ehr_practice01-webapi
+      stripPrefix: false
+    ormpostlib:
+      path: /ormpostlibs/**
+      serviceId: ehr_practice01-webapi
+      stripPrefix: false
+    ormdepestman:
+      path: /ormdepestmen/**
+      serviceId: ehr_practice01-webapi
+      stripPrefix: false
+    unitedperson:
+      path: /unitedpeople/**
+      serviceId: ehr_practice01-webapi
+      stripPrefix: false
+    pimperson:
+      path: /pimpeople/**
+      serviceId: ehr_practice01-webapi
+      stripPrefix: false
+    ormorg:
+      path: /ormorgs/**
+      serviceId: ehr_practice01-webapi
+      stripPrefix: false
+    ormqybzwh:
+      path: /ormqybzwhs/**
+      serviceId: ehr_practice01-webapi
+      stripPrefix: false
+    ormduty:
+      path: /ormduties/**
+      serviceId: ehr_practice01-webapi
+      stripPrefix: false
+    ormtitle:
+      path: /ormtitles/**
+      serviceId: ehr_practice01-webapi
+      stripPrefix: false
+    ormxmgl:
+      path: /ormxmgls/**
+      serviceId: ehr_practice01-webapi
+      stripPrefix: false
+    ormxmbq:
+      path: /ormxmbqs/**
+      serviceId: ehr_practice01-webapi
+      stripPrefix: false
+    ormorgsector:
+      path: /ormorgsectors/**
+      serviceId: ehr_practice01-webapi
+      stripPrefix: false
+    wfcore:
+      path: /wfcore/**
+      serviceId: ibzwf-api
+      stripPrefix: true
+  sensitive-headers:
+    - Cookie,Set-Cookie,Authorization

ehr-app/ehr-app-ehrorm/src/main/resources/application.yml

+spring:
+  profiles:
+    include: sys , ehrorm-prod
+  application:
+    name: ehr_practice01-ehrorm

ehr-app/ehr-app-ehrpcm/pom.xml

+<?xml version="1.0" encoding="UTF-8"?>
+<project xmlns="http://maven.apache.org/POM/4.0.0"
+         xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
+    <modelVersion>4.0.0</modelVersion>
+    <parent>
+        <artifactId>ehr-app</artifactId>
+        <groupId>cn.ibizlab.ehr</groupId>
+        <version>1.0.0.0</version>
+    </parent>
+
+    <artifactId>ehr-app-ehrpcm</artifactId>
+    <name>Ehr Gateway EHRPcm</name>
+    <description>Ehr EHRPcm</description>
+
+    <dependencies>
+		<dependency>
+			<groupId>cn.ibizlab.ehr</groupId>
+			<artifactId>ehr-util</artifactId>
+			<version>${project.version}</version>
+		</dependency>
+    </dependencies>
+
+
+    <properties>
+        <docker.image.prefix>registry.cn-shanghai.aliyuncs.com/ibizsys</docker.image.prefix>
+    </properties>
+
+
+    <profiles>
+        <profile>
+            <id>ehrpcm</id>
+            <build>
+                <resources>
+                    <resource>
+                        <directory>${basedir}/src/main/webapp</directory>
+                        <!--注意此次必须要放在此目录下才能被访问到 -->
+                        <targetPath>META-INF/resources</targetPath>
+                        <includes>
+                            <include>**/**</include>
+                        </includes>
+                    </resource>
+                    <resource>
+                        <directory>${basedir}/src/main/resources</directory>
+                        <includes>
+                            <include>**/**</include>
+                        </includes>
+                    </resource>
+                </resources>
+                <plugins>
+                    <plugin>
+                        <groupId>org.codehaus.mojo</groupId>
+                        <artifactId>exec-maven-plugin</artifactId>
+                        <version>1.6.0</version>
+                        <executions>
+                            <execution>
+                                <id>exec-yarn-run-install</id>
+                                <phase>prepare-package</phase>
+                                <goals>
+                                    <goal>exec</goal>
+                                </goals>
+                                <configuration>
+                                    <executable>yarn</executable>
+                                    <workingDirectory>../../app_EHRPcm</workingDirectory>
+                                </configuration>
+                            </execution>
+                            <execution>
+                                <id>exec-yarn-run-build</id>
+                                <phase>prepare-package</phase>
+                                <goals>
+                                    <goal>exec</goal>
+                                </goals>
+                                <configuration>
+                                    <executable>yarn</executable>
+                                    <arguments>
+                                        <argument>build</argument>
+                                    </arguments>
+                                    <workingDirectory>../../app_EHRPcm</workingDirectory>
+                                </configuration>
+                            </execution>
+                        </executions>
+                    </plugin>
+
+                    <plugin>
+                        <groupId>org.springframework.boot</groupId>
+                        <artifactId>spring-boot-maven-plugin</artifactId>
+                        <configuration>
+                            <finalName>ehr-app-ehrpcm</finalName>
+                            <jvmArguments>-Dfile.encoding=UTF-8</jvmArguments>
+                            <mainClass>cn.ibizlab.ehr.ehrpcm.EHRPcmApplication</mainClass>
+                            <outputDirectory>../../</outputDirectory>
+                        </configuration>
+                        <executions>
+                            <execution>
+                                <goals>
+                                    <goal>repackage</goal>
+                                </goals>
+                            </execution>
+                        </executions>
+                    </plugin>
+                    <plugin>
+                            <groupId>com.spotify</groupId>
+                            <artifactId>docker-maven-plugin</artifactId>
+                            <version>0.4.13</version>
+                            <configuration>
+                            <serverId>ibiz-dev</serverId>
+                            <imageName>${docker.image.prefix}/${project.artifactId}:latest</imageName>
+                            <dockerDirectory>${project.basedir}/src/main/docker</dockerDirectory>
+                            <resources>
+                                <resource>
+                                    <targetPath>/</targetPath>
+                                    <directory>../../</directory>
+                                    <include>${project.artifactId}.jar</include>
+                                </resource>
+                            </resources>
+                            </configuration>
+                    </plugin>
+                </plugins>
+            </build>
+        </profile>
+    </profiles>
+
+</project>
+

ehr-app/ehr-app-ehrpcm/src/main/docker/Dockerfile

+
+FROM openjdk:8-jre-alpine
+
+ENV SPRING_OUTPUT_ANSI_ENABLED=ALWAYS \
+    IBZ_SLEEP=0 \
+    JAVA_OPTS=""
+
+CMD echo "The application will start in ${IBZ_SLEEP}s..." && \
+    sleep ${IBZ_SLEEP} && \
+    java ${JAVA_OPTS} -Djava.security.egd=file:/dev/./urandom -jar /ehr-app-ehrpcm.jar
+
+EXPOSE 8080
+
+ADD ehr-app-ehrpcm.jar /ehr-app-ehrpcm.jar

ehr-app/ehr-app-ehrpcm/src/main/docker/ehr-app-ehrpcm.yaml

+version: "3.2"
+services:
+  ehr-app-ehrpcm:
+    image: registry.cn-shanghai.aliyuncs.com/ibizsys/ehr-app-ehrpcm:latest
+    ports:
+      - "8080:8080"
+    networks:
+      - agent_network
+    deploy:
+      mode: replicated
+      replicas: 1
+
+networks:
+  agent_network:
+    driver: overlay
+    attachable: true
\ No newline at end of file

ehr-app/ehr-app-ehrpcm/src/main/java/cn/ibizlab/ehr/ehrpcm/EHRPcmApplication.java

+package cn.ibizlab.ehr.ehrpcm;
+
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.boot.autoconfigure.SpringBootApplication;
+import org.springframework.cloud.client.discovery.EnableDiscoveryClient;
+import org.springframework.cloud.netflix.zuul.EnableZuulProxy;
+import org.springframework.cloud.openfeign.EnableFeignClients;
+import org.springframework.cloud.openfeign.FeignClientsConfiguration;
+import org.springframework.context.annotation.ComponentScan;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.context.annotation.Import;
+import org.mybatis.spring.annotation.MapperScan;
+import org.springframework.boot.SpringApplication;
+import org.springframework.web.method.support.HandlerMethodArgumentResolver;
+import org.springframework.web.servlet.config.annotation.WebMvcConfigurerAdapter;
+import java.util.List;
+
+@Slf4j
+@Import({
+    FeignClientsConfiguration.class
+})
+@EnableDiscoveryClient
+@Configuration
+@EnableFeignClients(basePackages = {"cn.ibizlab.ehr" })
+@EnableZuulProxy
+@ComponentScan(basePackages = {"cn.ibizlab.ehr"})
+@MapperScan("cn.ibizlab.ehr.*.mapper")
+@SpringBootApplication(exclude = {
+        org.springframework.boot.autoconfigure.security.servlet.SecurityAutoConfiguration.class,
+})
+public class EHRPcmApplication extends WebMvcConfigurerAdapter{
+
+    public static void main(String[] args) {
+        SpringApplication.run(EHRPcmApplication.class,args);
+    }
+
+    @Override
+    public void addArgumentResolvers(List<HandlerMethodArgumentResolver> argumentResolvers) {
+        super.addArgumentResolvers(argumentResolvers);
+        argumentResolvers.add(new cn.ibizlab.ehr.util.web.SearchContextHandlerMethodArgumentResolver());
+    }
+}