Prechádzať zdrojové kódy

升级shiro依赖,修复漏洞(随时注意兼容性)

ZhangWenQiang 5 rokov pred
rodič
commit
fa338d29ca
2 zmenil súbory, kde vykonal 6 pridanie a 3 odobranie
  1. 2 2
      happy-common/happy-common-core/pom.xml
  2. 4 1
      pom.xml

+ 2 - 2
happy-common/happy-common-core/pom.xml

@@ -47,12 +47,12 @@
 		<dependency>
 			<groupId>org.apache.shiro</groupId>
 			<artifactId>shiro-spring-boot-starter</artifactId>
-			<version>1.4.0</version>
+			<version>${shiro.version}</version>
 		</dependency>
 		<dependency>
 			<groupId>org.crazycake</groupId>
 			<artifactId>shiro-redis</artifactId>
-			<version>3.1.0</version>
+			<version>${shiro-redis.version}</version>
 			<exclusions>
 				<exclusion>
 					<groupId>org.apache.shiro</groupId>

+ 4 - 1
pom.xml

@@ -70,6 +70,9 @@
 		<aliyun-java-sdk-dysmsapi.version>1.0.0</aliyun-java-sdk-dysmsapi.version>
 		<aliyun.oss.version>3.6.0</aliyun.oss.version>
 		<guava.version>26.0-jre</guava.version>
+		<shiro.version>1.7.0</shiro.version>
+		<java-jwt.version>3.11.0</java-jwt.version>
+		<shiro-redis.version>3.1.0</shiro-redis.version>
 		<swagger2.version>2.9.2</swagger2.version>
 		<knife4j.version>2.0.3</knife4j.version>
 		<logstash-logback-encoder.version>6.1</logstash-logback-encoder.version>
@@ -195,7 +198,7 @@
 		<dependency>
 			<groupId>com.auth0</groupId>
 			<artifactId>java-jwt</artifactId>
-			<version>3.7.0</version>
+			<version>${java-jwt.version}</version>
 		</dependency>
 
 		<!-- Swagger API文档 -->