From 98fb35f0b9b8a240d8f8cd268dfb9e4531b669bc Mon Sep 17 00:00:00 2001
From: sion123 <450702724@qq.com>
Date: Wed, 27 May 2026 20:52:06 +0800
Subject: [PATCH] =?UTF-8?q?build(yudao-server):=20=E4=BD=BF=E7=94=A8=20spr?=
 =?UTF-8?q?ing-boot-maven-plugin=20=E6=8E=92=E9=99=A4=20BouncyCastle=20?=
 =?UTF-8?q?=E6=9B=BF=E4=BB=A3=20maven-enforcer-plugin?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

将防 BouncyCastle 签名 JAR 进入 fat JAR 的策略从 maven-enforcer-plugin 的编译时限制
改为 spring-boot-maven-plugin 的打包时排除，并从根 pom 移除不再需要的 enforcer 插件
及依赖版本属性。同时删除 yudao-dependencies 中全局提供的空壳 BouncyCastle 依赖，
避免污染所有模块的类路径。
---
 pom.xml                    |  6 -----
 yudao-dependencies/pom.xml | 25 ------------------
 yudao-server/pom.xml       | 53 +++++++++++++++-----------------------
 3 files changed, 21 insertions(+), 63 deletions(-)

diff --git a/pom.xml b/pom.xml
index 3c090230fb..7404439236 100644
--- a/pom.xml
+++ b/pom.xml
@@ -40,7 +40,6 @@
         <maven.compiler.target>${java.version}</maven.compiler.target>
         <maven-surefire-plugin.version>3.5.3</maven-surefire-plugin.version>
         <maven-compiler-plugin.version>3.14.0</maven-compiler-plugin.version>
-        <maven-enforcer-plugin.version>3.5.0</maven-enforcer-plugin.version>
         <flatten-maven-plugin.version>1.7.2</flatten-maven-plugin.version>
         <!-- maven-surefire-plugin 暂时无法通过 bom 的依赖读取（兼容老版本 IDEA 2024 及以前版本） -->
         <lombok.version>1.18.38</lombok.version>
@@ -113,11 +112,6 @@
                     <groupId>org.codehaus.mojo</groupId>
                     <artifactId>flatten-maven-plugin</artifactId>
                 </plugin>
-                <plugin>
-                    <groupId>org.apache.maven.plugins</groupId>
-                    <artifactId>maven-enforcer-plugin</artifactId>
-                    <version>${maven-enforcer-plugin.version}</version>
-                </plugin>
             </plugins>
         </pluginManagement>
 
diff --git a/yudao-dependencies/pom.xml b/yudao-dependencies/pom.xml
index 82a5527350..1ea1afab78 100644
--- a/yudao-dependencies/pom.xml
+++ b/yudao-dependencies/pom.xml
@@ -111,31 +111,6 @@
                     </exclusion>
                 </exclusions>
             </dependency>
-            <!-- 全局排除：所有 BouncyCastle 变体提供空壳版本，从源头杜绝 -->
-            <dependency>
-                <groupId>org.bouncycastle</groupId>
-                <artifactId>bcprov-jdk18on</artifactId>
-                <version>0.0.0</version>
-                <scope>provided</scope>
-            </dependency>
-            <dependency>
-                <groupId>org.bouncycastle</groupId>
-                <artifactId>bcpkix-jdk18on</artifactId>
-                <version>0.0.0</version>
-                <scope>provided</scope>
-            </dependency>
-            <dependency>
-                <groupId>org.bouncycastle</groupId>
-                <artifactId>bcprov-jdk15on</artifactId>
-                <version>0.0.0</version>
-                <scope>provided</scope>
-            </dependency>
-            <dependency>
-                <groupId>org.bouncycastle</groupId>
-                <artifactId>bcpkix-jdk15on</artifactId>
-                <version>0.0.0</version>
-                <scope>provided</scope>
-            </dependency>
             <!-- 锁定 volcengine SDK 版本，避免 agents-flex-image-volcengine 的 LATEST 解析到不存在的 2.0.6 -->
             <dependency>
                 <groupId>com.volcengine</groupId>
diff --git a/yudao-server/pom.xml b/yudao-server/pom.xml
index 28b6eaf00e..d1725ed2b9 100644
--- a/yudao-server/pom.xml
+++ b/yudao-server/pom.xml
@@ -145,6 +145,27 @@
                 <groupId>org.springframework.boot</groupId>
                 <artifactId>spring-boot-maven-plugin</artifactId>
                 <version>${spring.boot.version}</version>
+                <configuration>
+                    <!-- 从 fat JAR 中剔除 BouncyCastle：签名 JAR 在嵌套加载时 JCE 验证失败 -->
+                    <excludes>
+                        <exclude>
+                            <groupId>org.bouncycastle</groupId>
+                            <artifactId>bcprov-jdk18on</artifactId>
+                        </exclude>
+                        <exclude>
+                            <groupId>org.bouncycastle</groupId>
+                            <artifactId>bcpkix-jdk18on</artifactId>
+                        </exclude>
+                        <exclude>
+                            <groupId>org.bouncycastle</groupId>
+                            <artifactId>bcprov-jdk15on</artifactId>
+                        </exclude>
+                        <exclude>
+                            <groupId>org.bouncycastle</groupId>
+                            <artifactId>bcpkix-jdk15on</artifactId>
+                        </exclude>
+                    </excludes>
+                </configuration>
                 <executions>
                     <execution>
                         <goals>
@@ -153,38 +174,6 @@
                     </execution>
                 </executions>
             </plugin>
-            <!-- 防止 BouncyCastle 签名 JAR 进入 fat JAR，导致 JCE 验证失败 -->
-            <plugin>
-                <groupId>org.apache.maven.plugins</groupId>
-                <artifactId>maven-enforcer-plugin</artifactId>
-                <version>${maven-enforcer-plugin.version}</version>
-                <executions>
-                    <execution>
-                        <id>ban-bouncycastle</id>
-                        <goals>
-                            <goal>enforce</goal>
-                        </goals>
-                        <phase>package</phase>
-                        <configuration>
-                            <rules>
-                                <bannedDependencies>
-                                    <excludes>
-                                        <exclude>org.bouncycastle:bcprov-jdk18on</exclude>
-                                        <exclude>org.bouncycastle:bcpkix-jdk18on</exclude>
-                                        <exclude>org.bouncycastle:bcprov-jdk15on</exclude>
-                                        <exclude>org.bouncycastle:bcpkix-jdk15on</exclude>
-                                    </excludes>
-                                    <message>
-                                        BouncyCastle JAR 是签名的，在 Spring Boot fat JAR 中会导致 JCE 签名验证失败。
-                                        请在对应依赖中添加 exclusion 排除 org.bouncycastle。
-                                    </message>
-                                </bannedDependencies>
-                            </rules>
-                            <fail>true</fail>
-                        </configuration>
-                    </execution>
-                </executions>
-            </plugin>
         </plugins>
     </build>