⬆️ Upgrading dependencies. nacos 1.3.0

pigx-register/src/main/java/com/alibaba/nacos/controller/HealthController.java

@@ -0,0 +1,108 @@
+/*
+ * Copyright 1999-2018 Alibaba Group Holding Ltd.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+package com.alibaba.nacos.controller;
+
+import com.alibaba.nacos.config.server.service.repository.PersistService;
+import com.alibaba.nacos.naming.controllers.OperatorController;
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.http.ResponseEntity;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RestController;
+
+import javax.servlet.http.HttpServletRequest;
+
+/**
+ * @author <a href="mailto:huangxiaoyu1018@gmail.com">hxy1991</a>
+ */
+@RestController("consoleHealth")
+@RequestMapping("/v1/console/health")
+public class HealthController {
+
+	private static final Logger logger = LoggerFactory.getLogger(HealthController.class);
+
+	private final PersistService persistService;
+
+	private final OperatorController apiCommands;
+
+	@Autowired
+	public HealthController(PersistService persistService, OperatorController apiCommands) {
+		this.persistService = persistService;
+		this.apiCommands = apiCommands;
+	}
+
+	/**
+	 * Whether the Nacos is in broken states or not, and cannot recover except by being
+	 * restarted
+	 * @return HTTP code equal to 200 indicates that Nacos is in right states. HTTP code
+	 * equal to 500 indicates that Nacos is in broken states.
+	 */
+	@GetMapping("/liveness")
+	public ResponseEntity liveness() {
+		return ResponseEntity.ok().body("OK");
+	}
+
+	/**
+	 * Ready to receive the request or not
+	 * @return HTTP code equal to 200 indicates that Nacos is ready. HTTP code equal to
+	 * 500 indicates that Nacos is not ready.
+	 */
+	@GetMapping("/readiness")
+	public ResponseEntity readiness(HttpServletRequest request) {
+		boolean isConfigReadiness = isConfigReadiness();
+		boolean isNamingReadiness = isNamingReadiness(request);
+
+		if (isConfigReadiness && isNamingReadiness) {
+			return ResponseEntity.ok().body("OK");
+		}
+
+		if (!isConfigReadiness && !isNamingReadiness) {
+			return ResponseEntity.status(500).body("Config and Naming are not in readiness");
+		}
+
+		if (!isConfigReadiness) {
+			return ResponseEntity.status(500).body("Config is not in readiness");
+		}
+
+		return ResponseEntity.status(500).body("Naming is not in readiness");
+	}
+
+	private boolean isConfigReadiness() {
+		// check db
+		try {
+			persistService.configInfoCount("");
+			return true;
+		}
+		catch (Exception e) {
+			logger.error("Config health check fail.", e);
+		}
+		return false;
+	}
+
+	private boolean isNamingReadiness(HttpServletRequest request) {
+		try {
+			apiCommands.metrics(request);
+			return true;
+		}
+		catch (Exception e) {
+			logger.error("Naming health check fail.", e);
+		}
+		return false;
+	}
+
+}

pigx-register/src/main/java/com/alibaba/nacos/controller/NamespaceController.java

@@ -0,0 +1,182 @@
+/*
+ * Copyright 1999-2018 Alibaba Group Holding Ltd.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+package com.alibaba.nacos.controller;
+
+import com.alibaba.nacos.common.model.RestResult;
+import com.alibaba.nacos.config.server.model.TenantInfo;
+import com.alibaba.nacos.config.server.service.repository.PersistService;
+import com.alibaba.nacos.model.Namespace;
+import com.alibaba.nacos.model.NamespaceAllInfo;
+import com.alibaba.nacos.nacos.NacosAuthConfig;
+import com.alibaba.nacos.core.auth.ActionTypes;
+import com.alibaba.nacos.core.auth.Secured;
+import org.apache.commons.lang3.StringUtils;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.web.bind.annotation.*;
+
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+import java.util.ArrayList;
+import java.util.List;
+import java.util.UUID;
+import java.util.regex.Pattern;
+
+/**
+ * namespace service
+ *
+ * @author Nacos
+ */
+@RestController
+@RequestMapping("/v1/console/namespaces")
+public class NamespaceController {
+
+	@Autowired
+	private PersistService persistService;
+
+	private Pattern namespaceIdCheckPattern = Pattern.compile("^[\\w-]+");
+
+	private static final int NAMESPACE_ID_MAX_LENGTH = 128;
+
+	/**
+	 * Get namespace list
+	 * @param request request
+	 * @param response response
+	 * @return namespace list
+	 */
+	@GetMapping
+	public RestResult<List<Namespace>> getNamespaces(HttpServletRequest request, HttpServletResponse response) {
+		RestResult<List<Namespace>> rr = new RestResult<List<Namespace>>();
+		rr.setCode(200);
+		// TODO 获取用kp
+		List<TenantInfo> tenantInfos = persistService.findTenantByKp("1");
+		Namespace namespace0 = new Namespace("", "public", 200, persistService.configInfoCount(""), 0);
+		List<Namespace> namespaces = new ArrayList<Namespace>();
+		namespaces.add(namespace0);
+		for (TenantInfo tenantInfo : tenantInfos) {
+			int configCount = persistService.configInfoCount(tenantInfo.getTenantId());
+			Namespace namespaceTmp = new Namespace(tenantInfo.getTenantId(), tenantInfo.getTenantName(), 200,
+					configCount, 2);
+			namespaces.add(namespaceTmp);
+		}
+		rr.setData(namespaces);
+		return rr;
+	}
+
+	/**
+	 * get namespace all info by namespace id
+	 * @param request request
+	 * @param response response
+	 * @param namespaceId namespaceId
+	 * @return namespace all info
+	 */
+	@GetMapping(params = "show=all")
+	public NamespaceAllInfo getNamespace(HttpServletRequest request, HttpServletResponse response,
+			@RequestParam("namespaceId") String namespaceId) {
+		// TODO 获取用kp
+		if (StringUtils.isBlank(namespaceId)) {
+			return new NamespaceAllInfo(namespaceId, "Public", 200, persistService.configInfoCount(""), 0,
+					"Public Namespace");
+		}
+		else {
+			TenantInfo tenantInfo = persistService.findTenantByKp("1", namespaceId);
+			int configCount = persistService.configInfoCount(namespaceId);
+			return new NamespaceAllInfo(namespaceId, tenantInfo.getTenantName(), 200, configCount, 2,
+					tenantInfo.getTenantDesc());
+		}
+	}
+
+	/**
+	 * create namespace
+	 * @param request request
+	 * @param response response
+	 * @param namespaceName namespace Name
+	 * @param namespaceDesc namespace Desc
+	 * @return whether create ok
+	 */
+	@PostMapping
+	@Secured(resource = NacosAuthConfig.CONSOLE_RESOURCE_NAME_PREFIX + "namespaces", action = ActionTypes.WRITE)
+	public Boolean createNamespace(HttpServletRequest request, HttpServletResponse response,
+			@RequestParam("customNamespaceId") String namespaceId, @RequestParam("namespaceName") String namespaceName,
+			@RequestParam(value = "namespaceDesc", required = false) String namespaceDesc) {
+		// TODO 获取用kp
+		if (StringUtils.isBlank(namespaceId)) {
+			namespaceId = UUID.randomUUID().toString();
+		}
+		else {
+			namespaceId = namespaceId.trim();
+			if (!namespaceIdCheckPattern.matcher(namespaceId).matches()) {
+				return false;
+			}
+			if (namespaceId.length() > NAMESPACE_ID_MAX_LENGTH) {
+				return false;
+			}
+			if (persistService.tenantInfoCountByTenantId(namespaceId) > 0) {
+				return false;
+			}
+		}
+		persistService.insertTenantInfoAtomic("1", namespaceId, namespaceName, namespaceDesc, "nacos",
+				System.currentTimeMillis());
+		return true;
+	}
+
+	/**
+	 * @author klw(213539@qq.com)
+	 * @Description: check namespaceId exist
+	 * @Date 2019/12/10 21:41
+	 * @param: namespaceId
+	 * @return java.lang.Boolean
+	 */
+	@GetMapping(params = "checkNamespaceIdExist=true")
+	public Boolean checkNamespaceIdExist(@RequestParam("customNamespaceId") String namespaceId) {
+		if (StringUtils.isBlank(namespaceId)) {
+			return false;
+		}
+		return (persistService.tenantInfoCountByTenantId(namespaceId) > 0);
+	}
+
+	/**
+	 * edit namespace
+	 * @param namespace namespace
+	 * @param namespaceShowName namespace ShowName
+	 * @param namespaceDesc namespace Desc
+	 * @return whether edit ok
+	 */
+	@PutMapping
+	@Secured(resource = NacosAuthConfig.CONSOLE_RESOURCE_NAME_PREFIX + "namespaces", action = ActionTypes.WRITE)
+	public Boolean editNamespace(@RequestParam("namespace") String namespace,
+			@RequestParam("namespaceShowName") String namespaceShowName,
+			@RequestParam(value = "namespaceDesc", required = false) String namespaceDesc) {
+		// TODO 获取用kp
+		persistService.updateTenantNameAtomic("1", namespace, namespaceShowName, namespaceDesc);
+		return true;
+	}
+
+	/**
+	 * del namespace by id
+	 * @param request request
+	 * @param response response
+	 * @param namespaceId namespace Id
+	 * @return whether del ok
+	 */
+	@DeleteMapping
+	@Secured(resource = NacosAuthConfig.CONSOLE_RESOURCE_NAME_PREFIX + "namespaces", action = ActionTypes.WRITE)
+	public Boolean deleteConfig(HttpServletRequest request, HttpServletResponse response,
+			@RequestParam("namespaceId") String namespaceId) {
+		persistService.removeTenantInfoAtomic("1", namespaceId);
+		return true;
+	}
+
+}

pigx-register/src/main/java/com/alibaba/nacos/controller/PermissionController.java

@@ -0,0 +1,83 @@
+/*
+ * Copyright 1999-2018 Alibaba Group Holding Ltd.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+package com.alibaba.nacos.controller;
+
+import com.alibaba.nacos.common.model.RestResult;
+import com.alibaba.nacos.nacos.NacosAuthConfig;
+import com.alibaba.nacos.nacos.roles.NacosRoleServiceImpl;
+import com.alibaba.nacos.core.auth.ActionTypes;
+import com.alibaba.nacos.core.auth.Secured;
+import org.apache.commons.lang3.StringUtils;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.web.bind.annotation.*;
+
+/**
+ * Permission operation controller
+ *
+ * @author nkorange
+ * @since 1.2.0
+ */
+@RestController
+@RequestMapping("/v1/auth/permissions")
+public class PermissionController {
+
+	@Autowired
+	private NacosRoleServiceImpl nacosRoleService;
+
+	/**
+	 * Query permissions of a role
+	 * @param role the role
+	 * @param pageNo page index
+	 * @param pageSize page size
+	 * @return permission of a role
+	 */
+	@GetMapping
+	@Secured(resource = NacosAuthConfig.CONSOLE_RESOURCE_NAME_PREFIX + "permissions", action = ActionTypes.READ)
+	public Object getPermissions(@RequestParam int pageNo, @RequestParam int pageSize,
+			@RequestParam(name = "role", defaultValue = StringUtils.EMPTY) String role) {
+		return nacosRoleService.getPermissionsFromDatabase(role, pageNo, pageSize);
+	}
+
+	/**
+	 * Add a permission to a role
+	 * @param role the role
+	 * @param resource the related resource
+	 * @param action the related action
+	 * @return ok if succeed
+	 */
+	@PostMapping
+	@Secured(resource = NacosAuthConfig.CONSOLE_RESOURCE_NAME_PREFIX + "permissions", action = ActionTypes.WRITE)
+	public Object addPermission(@RequestParam String role, @RequestParam String resource, @RequestParam String action) {
+		nacosRoleService.addPermission(role, resource, action);
+		return new RestResult<>(200, "add permission ok!");
+	}
+
+	/**
+	 * Delete a permission from a role
+	 * @param role the role
+	 * @param resource the related resource
+	 * @param action the related action
+	 * @return ok if succeed
+	 */
+	@DeleteMapping
+	@Secured(resource = NacosAuthConfig.CONSOLE_RESOURCE_NAME_PREFIX + "permissions", action = ActionTypes.WRITE)
+	public Object deletePermission(@RequestParam String role, @RequestParam String resource,
+			@RequestParam String action) {
+		nacosRoleService.deletePermission(role, resource, action);
+		return new RestResult<>(200, "delete permission ok!");
+	}
+
+}

pigx-register/src/main/java/com/alibaba/nacos/controller/RoleController.java

@@ -0,0 +1,89 @@
+/*
+ * Copyright 1999-2018 Alibaba Group Holding Ltd.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+package com.alibaba.nacos.controller;
+
+import com.alibaba.nacos.common.model.RestResult;
+import com.alibaba.nacos.nacos.NacosAuthConfig;
+import com.alibaba.nacos.nacos.roles.NacosRoleServiceImpl;
+import com.alibaba.nacos.core.auth.ActionTypes;
+import com.alibaba.nacos.core.auth.Secured;
+import org.apache.commons.lang3.StringUtils;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.web.bind.annotation.*;
+
+/**
+ * Role operation controller
+ *
+ * @author nkorange
+ * @since 1.2.0
+ */
+@RestController
+@RequestMapping("/v1/auth/roles")
+public class RoleController {
+
+	@Autowired
+	private NacosRoleServiceImpl roleService;
+
+	/**
+	 * Get roles list
+	 * @param pageNo number index of page
+	 * @param pageSize page size
+	 * @param username optional, username of user
+	 * @return role list
+	 */
+	@GetMapping
+	@Secured(resource = NacosAuthConfig.CONSOLE_RESOURCE_NAME_PREFIX + "roles", action = ActionTypes.READ)
+	public Object getRoles(@RequestParam int pageNo, @RequestParam int pageSize,
+			@RequestParam(name = "username", defaultValue = "") String username) {
+		return roleService.getRolesFromDatabase(username, pageNo, pageSize);
+	}
+
+	/**
+	 * Add a role to a user
+	 * <p>
+	 * This method is used for 2 functions: 1. create a role and bind it to GLOBAL_ADMIN.
+	 * 2. bind a role to an user.
+	 * @param role
+	 * @param username
+	 * @return
+	 */
+	@PostMapping
+	@Secured(resource = NacosAuthConfig.CONSOLE_RESOURCE_NAME_PREFIX + "roles", action = ActionTypes.WRITE)
+	public Object addRole(@RequestParam String role, @RequestParam String username) {
+		roleService.addRole(role, username);
+		return new RestResult<>(200, "add role ok!");
+	}
+
+	/**
+	 * Delete a role. If no username is specified, all users under this role are deleted
+	 * @param role role
+	 * @param username username
+	 * @return ok if succeed
+	 */
+	@DeleteMapping
+	@Secured(resource = NacosAuthConfig.CONSOLE_RESOURCE_NAME_PREFIX + "roles", action = ActionTypes.WRITE)
+	public Object deleteRole(@RequestParam String role,
+			@RequestParam(name = "username", defaultValue = StringUtils.EMPTY) String username) {
+		if (StringUtils.isBlank(username)) {
+			roleService.deleteRole(role);
+		}
+		else {
+			roleService.deleteRole(role, username);
+		}
+		return new RestResult<>(200, "delete role of user " + username + " ok!");
+	}
+
+}

pigx-register/src/main/java/com/alibaba/nacos/controller/ServerStateController.java

@@ -0,0 +1,47 @@
+/*
+ * Copyright 1999-2018 Alibaba Group Holding Ltd.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+package com.alibaba.nacos.controller;
+
+import com.alibaba.nacos.common.utils.VersionUtils;
+import com.alibaba.nacos.core.utils.ApplicationUtils;
+import org.springframework.http.ResponseEntity;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RestController;
+
+import java.util.HashMap;
+import java.util.Map;
+
+/**
+ * @author xingxuechao on:2019/2/27 11:17 AM
+ */
+@RestController
+@RequestMapping("/v1/console/server")
+public class ServerStateController {
+
+	@GetMapping("/state")
+	public ResponseEntity serverState() {
+		Map<String, String> serverState = new HashMap<>(3);
+		serverState.put("standalone_mode", ApplicationUtils.getStandaloneMode() ? ApplicationUtils.STANDALONE_MODE_ALONE
+				: ApplicationUtils.STANDALONE_MODE_CLUSTER);
+
+		serverState.put("function_mode", ApplicationUtils.getFunctionMode());
+		serverState.put("version", VersionUtils.VERSION);
+
+		return ResponseEntity.ok().body(serverState);
+	}
+
+}

pigx-register/src/main/java/com/alibaba/nacos/controller/UserController.java

@@ -0,0 +1,234 @@
+/*
+ * Copyright 1999-2018 Alibaba Group Holding Ltd.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+package com.alibaba.nacos.controller;
+
+import com.alibaba.nacos.api.common.Constants;
+import com.alibaba.nacos.common.model.RestResult;
+import com.alibaba.nacos.common.utils.JacksonUtils;
+import com.alibaba.nacos.config.server.auth.RoleInfo;
+import com.alibaba.nacos.config.server.model.User;
+import com.alibaba.nacos.nacos.NacosAuthConfig;
+import com.alibaba.nacos.nacos.NacosAuthManager;
+import com.alibaba.nacos.nacos.roles.NacosRoleServiceImpl;
+import com.alibaba.nacos.nacos.users.NacosUser;
+import com.alibaba.nacos.nacos.users.NacosUserDetailsServiceImpl;
+import com.alibaba.nacos.utils.JwtTokenUtils;
+import com.alibaba.nacos.utils.PasswordEncoderUtil;
+import com.alibaba.nacos.core.auth.*;
+import com.fasterxml.jackson.databind.node.ObjectNode;
+
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.security.authentication.AuthenticationManager;
+import org.springframework.security.authentication.BadCredentialsException;
+import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
+import org.springframework.security.core.Authentication;
+import org.springframework.security.core.context.SecurityContextHolder;
+import org.springframework.security.core.userdetails.UserDetails;
+import org.springframework.web.bind.annotation.*;
+
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+import java.util.List;
+
+/**
+ * User related methods entry
+ *
+ * @author wfnuser
+ * @author nkorange
+ */
+@RestController("user")
+@RequestMapping({ "/v1/auth", "/v1/auth/users" })
+public class UserController {
+
+	@Autowired
+	private JwtTokenUtils jwtTokenUtils;
+
+	@Autowired
+	private AuthenticationManager authenticationManager;
+
+	@Autowired
+	private NacosUserDetailsServiceImpl userDetailsService;
+
+	@Autowired
+	private NacosRoleServiceImpl roleService;
+
+	@Autowired
+	private AuthConfigs authConfigs;
+
+	@Autowired
+	private NacosAuthManager authManager;
+
+	/**
+	 * Create a new user
+	 * @param username username
+	 * @param password password
+	 * @return ok if create succeed
+	 * @throws IllegalArgumentException if user already exist
+	 * @since 1.2.0
+	 */
+	@Secured(resource = NacosAuthConfig.CONSOLE_RESOURCE_NAME_PREFIX + "users", action = ActionTypes.WRITE)
+	@PostMapping
+	public Object createUser(@RequestParam String username, @RequestParam String password) {
+
+		User user = userDetailsService.getUserFromDatabase(username);
+		if (user != null) {
+			throw new IllegalArgumentException("user '" + username + "' already exist!");
+		}
+		userDetailsService.createUser(username, PasswordEncoderUtil.encode(password));
+		return new RestResult<>(200, "create user ok!");
+	}
+
+	/**
+	 * Delete an existed user
+	 * @param username username of user
+	 * @return ok if deleted succeed, keep silent if user not exist
+	 * @since 1.2.0
+	 */
+	@DeleteMapping
+	@Secured(resource = NacosAuthConfig.CONSOLE_RESOURCE_NAME_PREFIX + "users", action = ActionTypes.WRITE)
+	public Object deleteUser(@RequestParam String username) {
+		List<RoleInfo> roleInfoList = roleService.getRoles(username);
+		if (roleInfoList != null) {
+			for (RoleInfo roleInfo : roleInfoList) {
+				if (roleInfo.getRole().equals(NacosRoleServiceImpl.GLOBAL_ADMIN_ROLE)) {
+					throw new IllegalArgumentException("cannot delete admin: " + username);
+				}
+			}
+		}
+		userDetailsService.deleteUser(username);
+		return new RestResult<>(200, "delete user ok!");
+	}
+
+	/**
+	 * Update an user
+	 * @param username username of user
+	 * @param newPassword new password of user
+	 * @return ok if update succeed
+	 * @throws IllegalArgumentException if user not exist or oldPassword is incorrect
+	 * @since 1.2.0
+	 */
+	@PutMapping
+	@Secured(resource = NacosAuthConfig.CONSOLE_RESOURCE_NAME_PREFIX + "users", action = ActionTypes.WRITE)
+	public Object updateUser(@RequestParam String username, @RequestParam String newPassword) {
+
+		User user = userDetailsService.getUserFromDatabase(username);
+		if (user == null) {
+			throw new IllegalArgumentException("user " + username + " not exist!");
+		}
+
+		userDetailsService.updateUserPassword(username, PasswordEncoderUtil.encode(newPassword));
+
+		return new RestResult<>(200, "update user ok!");
+	}
+
+	/**
+	 * Get paged users
+	 * @param pageNo number index of page
+	 * @param pageSize size of page
+	 * @return A collection of users, empty set if no user is found
+	 * @since 1.2.0
+	 */
+	@GetMapping
+	@Secured(resource = NacosAuthConfig.CONSOLE_RESOURCE_NAME_PREFIX + "users", action = ActionTypes.READ)
+	public Object getUsers(@RequestParam int pageNo, @RequestParam int pageSize) {
+		return userDetailsService.getUsersFromDatabase(pageNo, pageSize);
+	}
+
+	/**
+	 * Login to Nacos
+	 * <p>
+	 * This methods uses username and password to require a new token.
+	 * @param username username of user
+	 * @param password password
+	 * @param response http response
+	 * @param request http request
+	 * @return new token of the user
+	 * @throws AccessException if user info is incorrect
+	 */
+	@PostMapping("/login")
+	public Object login(@RequestParam String username, @RequestParam String password, HttpServletResponse response,
+			HttpServletRequest request) throws AccessException {
+
+		if (AuthSystemTypes.NACOS.name().equalsIgnoreCase(authConfigs.getNacosAuthSystemType())) {
+			NacosUser user = (NacosUser) authManager.login(request);
+
+			response.addHeader(NacosAuthConfig.AUTHORIZATION_HEADER, NacosAuthConfig.TOKEN_PREFIX + user.getToken());
+
+			ObjectNode result = JacksonUtils.createEmptyJsonNode();
+			// JSONObject result = new JSONObject();
+			result.put(Constants.ACCESS_TOKEN, user.getToken());
+			result.put(Constants.TOKEN_TTL, authConfigs.getTokenValidityInSeconds());
+			result.put(Constants.GLOBAL_ADMIN, user.isGlobalAdmin());
+			return result;
+		}
+
+		// 通过用户名和密码创建一个 Authentication 认证对象，实现类为 UsernamePasswordAuthenticationToken
+		UsernamePasswordAuthenticationToken authenticationToken = new UsernamePasswordAuthenticationToken(username,
+				password);
+
+		RestResult<String> rr = new RestResult<String>();
+		try {
+			// 通过 AuthenticationManager（默认实现为ProviderManager）的authenticate方法验证
+			// Authentication 对象
+			Authentication authentication = authenticationManager.authenticate(authenticationToken);
+			// 将 Authentication 绑定到 SecurityContext
+			SecurityContextHolder.getContext().setAuthentication(authentication);
+			// 生成Token
+			String token = jwtTokenUtils.createToken(authentication);
+			// 将Token写入到Http头部
+			response.addHeader(NacosAuthConfig.AUTHORIZATION_HEADER, "Bearer " + token);
+			rr.setCode(200);
+			rr.setData("Bearer " + token);
+			return rr;
+		}
+		catch (BadCredentialsException authentication) {
+			rr.setCode(401);
+			rr.setMessage("Login failed");
+			return rr;
+		}
+	}
+
+	@PutMapping("/password")
+	@Deprecated
+	public RestResult<String> updatePassword(@RequestParam(value = "oldPassword") String oldPassword,
+			@RequestParam(value = "newPassword") String newPassword) {
+
+		RestResult<String> rr = new RestResult<String>();
+		Object principal = SecurityContextHolder.getContext().getAuthentication().getPrincipal();
+		String username = ((UserDetails) principal).getUsername();
+		User user = userDetailsService.getUserFromDatabase(username);
+		String password = user.getPassword();
+
+		// TODO: throw out more fine grained exceptions
+		try {
+			if (PasswordEncoderUtil.matches(oldPassword, password)) {
+				userDetailsService.updateUserPassword(username, PasswordEncoderUtil.encode(newPassword));
+				rr.setCode(200);
+				rr.setMessage("Update password success");
+			}
+			else {
+				rr.setCode(401);
+				rr.setMessage("Old password is invalid");
+			}
+		}
+		catch (Exception e) {
+			rr.setCode(500);
+			rr.setMessage("Update userpassword failed");
+		}
+		return rr;
+	}
+
+}