redisson初始化失败，报空指针，配置文件的配置加载不进来，求大神指教

演示地址也太菜了吧，全是bug,看不到啥特点~

再加一个商家入驻的服务，商品与商家关联 @

demo演示地址的接口太乱了，页面不用的接口也调

项目架构图是用什么工具画的，很形象，想学习下

相关的设计文档在哪里找

飒飒

为啥在service 还try，try你就try吧，你catch还不throw，你是要闹哪样啊，咋想的，坑死我了

比如双11凑单发起,基于家和上班的地点经纬度算法 发起拼单 省快递费? 其实类似美团外卖的拼单 不过需要计算库存.和打折优惠券之后的 没人付多少钱

ALI_PAY("alipay","微信支付渠道")

你这个demo好杂呀！

能否在下单的时候冻结商品数量，在支付回调成功之后在扣减库存数量。支付超时的时限为45min，超时未支付时，重新解冻商品数量

本·学·院·最·新·VIP·全·套·课·程：t.cn/A67dD1ag

如果60s内，大量用户校验验证码时，如生成了两个相同的Code，存入Redis，验证时会失败。
以下是测试代码
public class UserProviderApplication {
public static void main(String[] args) {
ConfigurableApplicationContext context=SpringApplication.run(UserProviderApplication.class,args);
KaptchaServiceImpl kaptchaService= (KaptchaServiceImpl) context.getBean("kaptchaServiceImpl");
Map<String,Object> map=new HashMap<String,Object>();
KaptchaCodeRequest request=new KaptchaCodeRequest();
for(int i=0;i<2000;i++){
KaptchaCodeResponse response=kaptchaService.getKaptchaCode(new KaptchaCodeRequest());
if(map.get(response.getImageCode())==null){
map.put(response.getImageCode(),response);
}else{
System.out.println("60s内有重复的token生成 redis里有两份一样的code，response = " + response);
request.setUuid(response.getUuid());
request.setCode(response.getCode());
KaptchaCodeResponse validateResponse=kaptchaService.validateKaptchaCode(request);
System.out.println("validateResponse = " + validateResponse);
}
}
}
结果总有一两笔是重复的：
60s内有重复的token生成 redis里有两份一样的code，response = KaptchaCodeResponse(imageCode=dktv, uuid=5e884bee-136c-4621-b58c-17f1485c28a3)
2019-10-16 16:47:16.654 INFO 908 --- [ main] c.p.user.services.KaptchaServiceImpl : 请求的redisKey=kaptcha_uuid5e884bee-136c-4621-b58c-17f1485c28a3,请求的code=000000,从redis获得的code=dktv
validateResponse = KaptchaCodeResponse(imageCode=null, uuid=null)
60s内有重复的token生成 redis里有两份一样的code，response = KaptchaCodeResponse(imageCode=961m, uuid=495d00e6-a8b7-4148-9375-4940f6bed166)
2019-10-16 16:47:30.025 INFO 908 --- [ main] c.p.user.services.KaptchaServiceImpl : 请求的redisKey=kaptcha_uuid495d00e6-a8b7-4148-9375-4940f6bed166,请求的code=000000,从redis获得的code=961m
validateResponse = KaptchaCodeResponse(imageCode=null, uuid=null)

I think the your project may be vulnerable to Improper Restriction of XML External Entity Reference. It shares similarities to a recent CVE disclosure CVE-2021-3878 in the stanfordnlp/CoreNLP. The vulnerable methods are as follows:

1. com.gpmall.pay.biz.payment.channel.wechatpay.WeChatBuildRequest.doXMLParse(String xml) in the file pay-service/pay-provider/src/main/java/com/gpmall/pay/biz/payment/channel/wechatpay/WeChatBuildRequest.java.

The source vulnerability information is as follows:

Vulnerability Detail:
CVE Identifier: CVE-2021-3878
Description: corenlp is vulnerable to Improper Restriction of XML External Entity Reference
Reference:https://nvd.nist.gov/vuln/detail/CVE-2021-3878.
Patch: stanfordnlp/CoreNLP@e5bbe13.

Vulnerability Description:
This vulnerability occurs because of the Improper Restriction of XML External Entity Reference. Given that the XML schema files which is compromised by a hacker, the victim conducts regular process may result in an XML External Entity (XXE) Injection attack.

Recommended Actions:
The corresponding fixes are similar to CVE-2021-3878 to some extent. I have provided the following fixes by applying several patching statements, ensuring that the external entities and DTDs are not loaded when parsing and processing XML documents using the document builder. You can call the function safeDocumentBuilderFactory I defined below instead of directly calling DocumentBuilderFactory.newInstance() to create a DocumentBuilderFactory object to avoid XXE attacks.

  public static DocumentBuilderFactory safeDocumentBuilderFactory() {
    DocumentBuilderFactory dbf = DocumentBuilderFactory.newInstance();
    try {
      dbf.setFeature("http://apache.org/xml/features/disallow-doctype-decl", true);
      dbf.setFeature("http://apache.org/xml/features/nonvalidating/load-external-dtd", false);
      dbf.setFeature("http://xml.org/sax/features/external-general-entities", false);
      dbf.setFeature("http://xml.org/sax/features/external-parameter-entities", false);
      dbf.setFeature("http://apache.org/xml/features/dom/create-entity-ref-nodes", false);
      dbf.setFeature(XMLConstants.FEATURE_SECURE_PROCESSING, true);
    } catch (ParserConfigurationException e) {
      log.warn(e);
    }
    return dbf;
  }

Considering the potential riskes it may have, I am willing to cooperate with your to verify, address, and report the identified vulnerability promptly through responsible means. If you require any further information or assistance, please do not hesitate to reach out to me.
Thank you and looking forward to hearing from you soon.

gpmall项目现在是微服务架构还是SOA架构

有没有教程视频看呢

搜索部分是准备用es还是用什么其他技术实现？我看search-service里面还没有代码

请问下分布式事务，事务一直性采用的什么，怎么实现的

com.gpmall.order.services.OrderCoreServiceImpl#deleteOrderWithTransaction
被 @transactional 标注的方法 必须由spring去调用才会生效
比如如下方法才会生效事务
@Autowired OrderCoreService orderCoreService
orderCoreService.deleteOrderWithTransaction();

IE11白屏

Unable to connect to Redis server: redis.gpmall.com/119.28.132.32:6379

##这个IP地址在哪更改啊

有没有详细的部署文档教程？？？

或者mic老师你出一期视频讲下也可以的

是不是应该加个关于 com.gpmall.commons.producer.RabbitMessageProducer 的组件扫描？

针对优惠券的设计补充一些建议

• 优惠券的主表中增加针对优惠券条款，图片，除了优惠券总数外的最大领取数、已经领取数，使用分类限制、优惠券来源。另外，关于是否可用的字段来标识范围太局限，优惠券应该会涉及到上下架、删除、过期等状态。

• 优惠券应该需要增加用户优惠券的设计纬度。以此针对来用户自己的优惠券使用情况及使用期限。

以上仅供参考

这个jar包下载不到，请问如何找到这个包

Need to add unit testing and more documents in English

输入完密码回车

尴尬 不知道参与GitHub开源项目流程

扫描了QQ之后，让绑定账号，这个账号密码是什么啊

为什么每个模块都没有controller层啊

支持登录的用户通过运单号实施查询物流信息，前期可以使用快递100的Api或直接访问快递100的查询运单接口

启动报这个错

check完代码，基本的代码报错还有，根本无法运行，如果加了一个特殊的工具什么的，请增加说明文档，谢谢

项目中需要IP的地方能不能都换成localhost或者其他的。这样，我们clone运行的时候，只要启动相应组件，改下本地的host文件就可以了~

项目不好构建，博主改成gradle项目吧

支付模块中，支付功能是单独封装了一个方法，并使用了策略模式。
但是，订单查询，退款，退款查询，异步通知功能如何设计？
--：是把几个功能一起封装到统一方法中，还是每个功能都封装一个方法，感觉每个都封装一个方法有点多余，不知大佬怎么思考？

user-service，user-provider项目中com.gpmall.user.utils.JwtTokenUtils#freeJwt，这个方法中：

//获得token的头部，载荷和签名，只对比头部和载荷
String[] headPayload = token.split("\\.");
 //获得jwt解密后头部
String header = decodedJWT.getHeader();
//获得jwt解密后载荷
String payload = decodedJWT.getPayload();
if (!header.equals(headPayload[0]) && !payload.equals(headPayload[1])) {
throw new ValidateException(SysRetCodeConstants.TOKEN_VALID_FAILED.getCode(), SysRetCodeConstants.TOKEN_VALID_FAILED.getMessage());
        }

其中header和payload都是解密之后的，而headPayload是解密之前的，这里是否存在逻辑错误，希望大家帮忙看看

null

java.lang.NoClassDefFoundError: org/apache/dubbo/config/spring/util/BeanRegistrar

at org.apache.dubbo.spring.boot.beans.factory.config.OverrideBeanDefinitionRegistryPostProcessor.postProcessBeanDefinitionRegistry(OverrideBeanDefinitionRegistryPostProcessor.java:36) ~[dubbo-spring-boot-autoconfigure-compatible-2.7.3.jar:2.7.3]
at org.springframework.context.support.PostProcessorRegistrationDelegate.invokeBeanFactoryPostProcessors(PostProcessorRegistrationDelegate.java:70) ~[spring-context-5.1.8.RELEASE.jar:5.1.8.RELEASE]
at org.springframework.context.support.AbstractApplicationContext.invokeBeanFactoryPostProcessors(AbstractApplicationContext.java:705) ~[spring-context-5.1.8.RELEASE.jar:5.1.8.RELEASE]
at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:531) ~[spring-context-5.1.8.RELEASE.jar:5.1.8.RELEASE]
at org.springframework.boot.SpringApplication.refresh(SpringApplication.java:742) [spring-boot-2.1.6.RELEASE.jar:2.1.6.RELEASE]
at org.springframework.boot.SpringApplication.refreshContext(SpringApplication.java:389) [spring-boot-2.1.6.RELEASE.jar:2.1.6.RELEASE]
at org.springframework.boot.SpringApplication.run(SpringApplication.java:311) [spring-boot-2.1.6.RELEASE.jar:2.1.6.RELEASE]
at org.springframework.boot.SpringApplication.run(SpringApplication.java:1213) [spring-boot-2.1.6.RELEASE.jar:2.1.6.RELEASE]
at org.springframework.boot.SpringApplication.run(SpringApplication.java:1202) [spring-boot-2.1.6.RELEASE.jar:2.1.6.RELEASE]
at com.gpmall.user.bootstrap.UserProviderApplication.main(UserProviderApplication.java:14) [classes/:na]

Caused by: java.lang.ClassNotFoundException: org.apache.dubbo.config.spring.util.BeanRegistrar
at java.net.URLClassLoader.findClass(URLClassLoader.java:382) ~[na:1.8.0_291]
at java.lang.ClassLoader.loadClass(ClassLoader.java:418) ~[na:1.8.0_291]
at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:355) ~[na:1.8.0_291]
at java.lang.ClassLoader.loadClass(ClassLoader.java:351) ~[na:1.8.0_291]
... 10 common frames omitted

Process finished with exit code 1