SchedulerSecurityConfig

@Configuration @EnableWebFluxSecurity public class SchedulerSecurityConfig

源码Source io/agentscope/builder/web/config/SchedulerSecurityConfig.java:57–142

调度器 Security 配置，保存相关配置项。位于 io.agentscope.builder.web.config 包。核心成员包括 securityWebFilterChain、corsConfigurationSource。

WebFlux Security configuration for the builder scheduler plane.

/actuator/health|info — public
/api/** — requires an authenticated principal: a user JWT (same signing secret as the control plane) or the internal token (X-Builder-Internal-Token) for plane-to-plane calls from the data / control planes
/** — public (the scheduler serves no browser assets; only /api/** is protected)

方法摘要Method Summary

方法Method	说明Description
`public SecurityWebFilterChain securityWebFilterChain(ServerHttpSecurity http,` `JwtService jwtService, String internalToken)`	执行 `securityWebFilterChain` 方法。 Performs the security web filter chain operation.
`public CorsConfigurationSource corsConfigurationSource()`	返回 `corsConfigurationSource` 结果。 Returns the cors configuration source.

public SecurityWebFilterChain securityWebFilterChain(ServerHttpSecurity http, JwtService jwtService, String internalToken)

执行 securityWebFilterChain 方法。

Performs the security web filter chain operation.

参数Parameters

名称Name	类型Type	说明Description
`http`	ServerHttpSecurity	HTTP（类型 `ServerHttpSecurity`）。The http.
`jwtService`	JwtService	JWT 服务（类型 `JwtService`）。The jwt service.
`internalToken`	String	内部令牌（类型 `String`）。The internal token.

返回Returns SecurityWebFilterChain

返回SecurityWebFilterChain。Returns security web filter chain.

源码Source io/agentscope/builder/web/config/SchedulerSecurityConfig.java:61–92

public CorsConfigurationSource corsConfigurationSource()

返回 corsConfigurationSource 结果。

Returns the cors configuration source.

返回Returns CorsConfigurationSource

返回CorsConfigurationSource。Returns cors configuration source.

源码Source io/agentscope/builder/web/config/SchedulerSecurityConfig.java:94–104