Startup.cs 17 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412
  1. // Admin.NET 项目的版权、商标、专利和其他相关权利均受相应法律法规的保护。使用本项目应遵守相关法律法规和许可证的要求。
  2. //
  3. // 本项目主要遵循 MIT 许可证和 Apache 许可证(版本 2.0)进行分发和使用。许可证位于源代码树根目录中的 LICENSE-MIT 和 LICENSE-APACHE 文件。
  4. //
  5. // 不得利用本项目从事危害国家安全、扰乱社会秩序、侵犯他人合法权益等法律法规禁止的活动!任何基于本项目二次开发而产生的一切法律纠纷和责任,我们不承担任何责任!
  6. using Admin.NET.Core;
  7. using Admin.NET.Core.ElasticSearch;
  8. using Admin.NET.Core.Service;
  9. using AspNetCoreRateLimit;
  10. using Furion;
  11. using Furion.Logging;
  12. using Furion.SpecificationDocument;
  13. using Furion.VirtualFileServer;
  14. using IPTools.Core;
  15. using Microsoft.AspNetCore.Authentication.JwtBearer;
  16. using Microsoft.AspNetCore.Builder;
  17. using Microsoft.AspNetCore.Hosting;
  18. using Microsoft.AspNetCore.Http;
  19. using Microsoft.AspNetCore.HttpOverrides;
  20. using Microsoft.AspNetCore.ResponseCompression;
  21. using Microsoft.Extensions.DependencyInjection;
  22. using Microsoft.Extensions.Hosting;
  23. using Newtonsoft.Json;
  24. using OnceMi.AspNetCore.OSS;
  25. using Scalar.AspNetCore;
  26. using SixLabors.ImageSharp.Web.DependencyInjection;
  27. using System;
  28. using System.Linq;
  29. using System.Text.Encodings.Web;
  30. using System.Text.Json;
  31. using System.Text.Unicode;
  32. using System.Threading.Tasks;
  33. #if NET10_0_OR_GREATER
  34. using Admin.NET.Core.Update;
  35. #endif
  36. namespace Admin.NET.Web.Core;
  37. [AppStartup(int.MaxValue)]
  38. public class Startup : AppStartup
  39. {
  40. public void ConfigureServices(IServiceCollection services)
  41. {
  42. // 配置选项
  43. services.AddProjectOptions();
  44. // 缓存注册
  45. services.AddCache();
  46. // SqlSugar
  47. services.AddSqlSugar();
  48. // JWT
  49. services.AddJwt<JwtHandler>(enableGlobalAuthorize: true, jwtBearerConfigure: options =>
  50. {
  51. // 实现 JWT 身份验证过程控制
  52. options.Events = new JwtBearerEvents
  53. {
  54. OnMessageReceived = context =>
  55. {
  56. var httpContext = context.HttpContext;
  57. // 若请求 Url 包含 token 参数,则设置 Token 值
  58. if (httpContext.Request.Query.ContainsKey("token"))
  59. context.Token = httpContext.Request.Query["token"];
  60. return Task.CompletedTask;
  61. }
  62. };
  63. }).AddSignatureAuthentication(options => // 添加 Signature 身份验证
  64. {
  65. options.Events = SysOpenAccessService.GetSignatureAuthenticationEventImpl();
  66. });
  67. // 允许跨域
  68. services.AddCorsAccessor();
  69. // 远程请求
  70. services.AddHttpRemote();
  71. // 任务队列
  72. services.AddTaskQueue();
  73. // 任务调度(JobSchedule:Enabled 可整体关闭,缺省为开启;启动期 Schedule Preload 与
  74. // 插件 Configure 阶段同步建表共享 SqlSugarScope 的 AsyncLocal 连接存在并发竞态,
  75. // 本地连远程库调试时可临时置 false 规避)
  76. if (App.GetConfig<bool?>("JobSchedule:Enabled", true) ?? true)
  77. {
  78. services.AddSchedule(options =>
  79. {
  80. options.AddPersistence<DbJobPersistence>(); // 添加作业持久化器
  81. options.AddMonitor<JobMonitor>(); // 添加作业执行监视器
  82. });
  83. }
  84. // 脱敏检测
  85. services.AddSensitiveDetection();
  86. // Json序列化设置
  87. static void SetNewtonsoftJsonSetting(JsonSerializerSettings setting)
  88. {
  89. setting.DateFormatHandling = DateFormatHandling.IsoDateFormat;
  90. setting.DateTimeZoneHandling = DateTimeZoneHandling.Local;
  91. //setting.Converters.AddDateTimeTypeConverters(localized: false); // 时间本地化
  92. setting.DateFormatString = "yyyy-MM-dd HH:mm:ss"; // 时间格式化
  93. setting.ReferenceLoopHandling = ReferenceLoopHandling.Ignore; // 忽略循环引用
  94. // setting.ContractResolver = new CamelCasePropertyNamesContractResolver(); // 解决动态对象属性名大写
  95. // setting.NullValueHandling = NullValueHandling.Ignore; // 忽略空值
  96. setting.Converters.AddLongTypeConverters(); // long转string(防止js精度溢出) 超过17位开启
  97. // setting.MetadataPropertyHandling = MetadataPropertyHandling.Ignore; // 解决DateTimeOffset异常
  98. // setting.DateParseHandling = DateParseHandling.None; // 解决DateTimeOffset异常
  99. // setting.Converters.Add(new IsoDateTimeConverter { DateTimeStyles = DateTimeStyles.AssumeUniversal }); // 解决DateTimeOffset异常
  100. }
  101. ;
  102. services.AddControllersWithViews()
  103. .AddAppLocalization()
  104. .AddNewtonsoftJson(options => SetNewtonsoftJsonSetting(options.SerializerSettings))
  105. //.AddXmlSerializerFormatters()
  106. //.AddXmlDataContractSerializerFormatters()
  107. .AddInjectWithUnifyResult<AdminResultProvider>()
  108. .AddJsonOptions(options =>
  109. {
  110. options.JsonSerializerOptions.Encoder = JavaScriptEncoder.Create(UnicodeRanges.All); // 禁止Unicode转码
  111. options.JsonSerializerOptions.Converters.AddDateTimeTypeConverters("yyyy-MM-dd HH:mm:ss"); // 时间格式化
  112. })
  113. .AddApplicationPart(typeof(Admin.NET.Plugin.AiDOP.Startup).Assembly);
  114. // 三方授权登录OAuth
  115. services.AddOAuth();
  116. // ElasticSearch
  117. services.AddElasticSearchClients();
  118. // 配置Nginx转发获取客户端真实IP
  119. // 注1:如果负载均衡不是在本机通过 Loopback 地址转发请求的,一定要加上options.KnownNetworks.Clear()和options.KnownProxies.Clear()
  120. // 注2:如果设置环境变量 ASPNETCORE_FORWARDEDHEADERS_ENABLED 为 True,则不需要下面的配置代码
  121. services.Configure<ForwardedHeadersOptions>(options =>
  122. {
  123. options.ForwardedHeaders = ForwardedHeaders.All;
  124. options.KnownNetworks.Clear();
  125. options.KnownProxies.Clear();
  126. });
  127. // 限流服务
  128. services.AddInMemoryRateLimiting();
  129. services.AddSingleton<IRateLimitConfiguration, RateLimitConfiguration>();
  130. // 事件总线
  131. services.AddEventBus(options =>
  132. {
  133. options.UseUtcTimestamp = false;
  134. // 不启用事件日志
  135. options.LogEnabled = false;
  136. // 事件执行器(失败重试)
  137. options.AddExecutor<RetryEventHandlerExecutor>();
  138. // 事件执行器(重试后依然处理未处理异常的处理器)
  139. options.UnobservedTaskExceptionHandler = (obj, args) =>
  140. {
  141. if (args.Exception?.Message != null)
  142. Log.Error($"EeventBus 有未处理异常 :{args.Exception?.Message} ", args.Exception);
  143. };
  144. // 事件执行器-监视器(每一次处理都会进入)
  145. options.AddMonitor<EventHandlerMonitor>();
  146. #region Redis消息队列
  147. // 替换事件源存储器为Redis
  148. var cacheOptions = App.GetConfig<CacheOptions>("Cache", true);
  149. if (cacheOptions.CacheType == CacheTypeEnum.Redis.ToString())
  150. {
  151. options.ReplaceStorer(serviceProvider =>
  152. {
  153. var cacheProvider = serviceProvider.GetRequiredService<NewLife.Caching.ICacheProvider>();
  154. // 创建默认内存通道事件源对象,可自定义队列路由key,如:adminnet_eventsource_queue
  155. return new RedisEventSourceStorer(cacheProvider, "adminnet_eventsource_queue", 3000);
  156. });
  157. }
  158. #endregion Redis消息队列
  159. #region RabbitMQ消息队列
  160. //// 创建默认内存通道事件源对象,可自定义队列路由key,如:adminnet
  161. //var eventBusOpt = App.GetConfig<EventBusOptions>("EventBus", true);
  162. //var rbmqEventSourceStorer = new RabbitMQEventSourceStore(new ConnectionFactory
  163. //{
  164. // UserName = eventBusOpt.RabbitMQ.UserName,
  165. // Password = eventBusOpt.RabbitMQ.Password,
  166. // HostName = eventBusOpt.RabbitMQ.HostName,
  167. // Port = eventBusOpt.RabbitMQ.Port
  168. //}, "adminnet", 3000);
  169. //// 替换默认事件总线存储器
  170. //options.ReplaceStorer(serviceProvider =>
  171. //{
  172. // return rbmqEventSourceStorer;
  173. //});
  174. #endregion RabbitMQ消息队列
  175. });
  176. // 图像处理
  177. services.AddImageSharp();
  178. // OSS对象存储
  179. var ossOpt = App.GetConfig<OSSProviderOptions>("OSSProvider", true);
  180. services.AddOSSService(Enum.GetName(ossOpt.Provider), "OSSProvider");
  181. // 文件存储服务
  182. services.AddTransient<SysFileProviderService>();
  183. services.AddSingleton<IOSSServiceManager, OSSServiceManager>(); // 改为单例以保持缓存
  184. services.AddTransient<MultiOSSFileProvider>();
  185. // 模板引擎
  186. services.AddViewEngine();
  187. // 即时通讯
  188. services.AddSignalR(options =>
  189. {
  190. options.EnableDetailedErrors = true;
  191. options.KeepAliveInterval = TimeSpan.FromSeconds(15); // 服务器端向客户端ping的间隔
  192. options.ClientTimeoutInterval = TimeSpan.FromSeconds(30); // 客户端向服务器端ping的间隔
  193. options.MaximumReceiveMessageSize = 1024 * 1014 * 10; // 数据包大小10M,默认最大为32K
  194. }).AddNewtonsoftJsonProtocol(options => SetNewtonsoftJsonSetting(options.PayloadSerializerSettings));
  195. // 系统日志
  196. services.AddLoggingSetup();
  197. // 验证码
  198. services.AddCaptcha();
  199. // 控制台logo
  200. services.AddConsoleLogo();
  201. //// Swagger 时间格式化
  202. //services.AddSwaggerGen(c =>
  203. //{
  204. // c.MapType<DateTime>(() => new Microsoft.OpenApi.Models.OpenApiSchema
  205. // {
  206. // Type = "string",
  207. // Format = "date-time",
  208. // Example = new Microsoft.OpenApi.Any.OpenApiString(DateTime.Now.ToString("yyyy-MM-dd HH:mm:ss")) // 示例值
  209. // });
  210. // // 确保生成的文档包含 OpenAPI 版本字段
  211. // c.SwaggerDoc("v1", new Microsoft.OpenApi.Models.OpenApiInfo
  212. // {
  213. // Version = "v1",
  214. // Title = "Admin.NET API",
  215. // Description = "Admin.NET 通用权限开发平台"
  216. // });
  217. // c.OperationFilter<TenantHeaderOperationFilter>();
  218. //});
  219. // 将IP地址数据库文件完全加载到内存,提升查询速度(以空间换时间,内存将会增加60-70M)
  220. IpToolSettings.LoadInternationalDbToMemory = true;
  221. // 设置默认查询器China和International
  222. //IpToolSettings.DefalutSearcherType = IpSearcherType.China;
  223. IpToolSettings.DefalutSearcherType = IpSearcherType.International;
  224. // 配置gzip与br的压缩等级为最优
  225. //services.Configure<BrotliCompressionProviderOptions>(options =>
  226. //{
  227. // options.Level = CompressionLevel.Optimal;
  228. //});
  229. //services.Configure<GzipCompressionProviderOptions>(options =>
  230. //{
  231. // options.Level = CompressionLevel.Optimal;
  232. //});
  233. // 注册压缩响应
  234. services.AddResponseCompression((options) =>
  235. {
  236. options.EnableForHttps = true;
  237. options.Providers.Add<BrotliCompressionProvider>();
  238. options.Providers.Add<GzipCompressionProvider>();
  239. options.MimeTypes = ResponseCompressionDefaults.MimeTypes.Concat(
  240. [
  241. "text/html; charset=utf-8",
  242. "application/xhtml+xml",
  243. "application/atom+xml",
  244. "image/svg+xml"
  245. ]);
  246. });
  247. // 注册虚拟文件系统服务
  248. services.AddVirtualFileServer();
  249. }
  250. public void Configure(IApplicationBuilder app, IWebHostEnvironment env)
  251. {
  252. // 响应压缩
  253. app.UseResponseCompression();
  254. app.UseForwardedHeaders();
  255. if (env.IsDevelopment())
  256. {
  257. app.UseDeveloperExceptionPage();
  258. }
  259. else
  260. {
  261. app.UseExceptionHandler("/Home/Error");
  262. app.UseHsts();
  263. }
  264. app.Use(async (context, next) =>
  265. {
  266. context.Response.Headers.Append("Admin.NET", "Admin.NET");
  267. await next();
  268. });
  269. // 图像处理
  270. app.UseImageSharp();
  271. // 特定文件类型(文件后缀)处理
  272. var contentTypeProvider = FS.GetFileExtensionContentTypeProvider();
  273. // contentTypeProvider.Mappings[".文件后缀"] = "MIME 类型";
  274. app.UseStaticFiles(new StaticFileOptions
  275. {
  276. ContentTypeProvider = contentTypeProvider
  277. });
  278. // 二级目录文件路径解析
  279. if (!string.IsNullOrEmpty(App.Settings.VirtualPath))
  280. app.UseStaticFiles(new StaticFileOptions
  281. {
  282. RequestPath = App.Settings.VirtualPath,
  283. FileProvider = App.WebHostEnvironment.WebRootFileProvider
  284. });
  285. //// 启用HTTPS
  286. //app.UseHttpsRedirection();
  287. // 启用OAuth
  288. app.UseOAuth();
  289. // 添加状态码拦截中间件
  290. app.UseUnifyResultStatusCodes();
  291. // 启用多语言,必须在 UseRouting 之前
  292. app.UseAppLocalization();
  293. // 路由注册
  294. app.UseRouting();
  295. // 启用跨域,必须在 UseRouting 和 UseAuthentication 之间注册
  296. app.UseCorsAccessor();
  297. // 启用鉴权授权
  298. app.UseAuthentication();
  299. app.UseAuthorization();
  300. // 限流组件(在跨域之后)
  301. app.UseIpRateLimiting();
  302. app.UseClientRateLimiting();
  303. app.UsePolicyRateLimit();
  304. // 任务调度看板
  305. app.UseScheduleUI(options =>
  306. {
  307. options.RequestPath = "/schedule"; // 必须以 / 开头且不以 / 结尾
  308. options.DisableOnProduction = false; // 是否在生产环境中关闭
  309. options.DisplayEmptyTriggerJobs = true; // 是否显示空作业触发器的作业
  310. options.DisplayHead = false; // 是否显示页头
  311. options.DefaultExpandAllJobs = false; // 是否默认展开所有作业
  312. options.EnableDirectoryBrowsing = false; // 是否启用目录浏览
  313. options.Title = "定时任务看板"; // 自定义看板标题
  314. options.LoginConfig.OnLoging = async (username, password, httpContext) =>
  315. {
  316. var res = await httpContext.RequestServices.GetRequiredService<SysAuthService>().SwaggerSubmitUrl(new SpecificationAuth { UserName = username, Password = password });
  317. return res == 200;
  318. };
  319. options.LoginConfig.DefaultUsername = "";
  320. options.LoginConfig.DefaultPassword = "";
  321. options.LoginConfig.SessionKey = "schedule_session_key"; // 登录客户端存储的 Session 键
  322. });
  323. app.UseInject(string.Empty, options =>
  324. {
  325. foreach (var groupInfo in SpecificationDocumentBuilder.GetOpenApiGroups())
  326. {
  327. groupInfo.Description += "<br/><u><b><font color='FF0000'> 👮不得利用本项目从事危害国家安全、扰乱社会秩序、侵犯他人合法权益等法律法规禁止的活动!任何基于本项目二次开发而产生的一切法律纠纷和责任,我们不承担任何责任!</font></b></u>";
  328. }
  329. options.ConfigureSwagger(m =>
  330. {
  331. m.OpenApiVersion = Microsoft.OpenApi.OpenApiSpecVersion.OpenApi3_0;
  332. });
  333. });
  334. #if NET10_0_OR_GREATER
  335. app.UseAutoVersionUpdate();
  336. #endif
  337. app.UseEndpoints(endpoints =>
  338. {
  339. // 配置 Scalar 第三方 UI 集成(路由前缀一致代表独立,不同则代表共存)
  340. if (App.GetConfig<bool>("AppSettings:InjectSpecificationDocument", true))
  341. {
  342. endpoints.MapScalarApiReference("sapi", options =>
  343. {
  344. options.WithTitle("Admin.NET");
  345. // 配置 OpenAPI 文档
  346. foreach (var groupInfo in SpecificationDocumentBuilder.GetOpenApiGroups())
  347. {
  348. options.AddDocument(groupInfo.Group, groupInfo.Title, groupInfo.RouteTemplate);
  349. }
  350. });
  351. }
  352. // 注册集线器
  353. endpoints.MapHubs();
  354. endpoints.MapControllerRoute(
  355. name: "default",
  356. pattern: "{controller=Home}/{action=Index}/{id?}");
  357. });
  358. }
  359. }