feat: 实现API文档支持与系统优化

refactor(ArticleRepository): 修正@Param注解导入错误并优化查询方法
fix(ArticleService): 解决事务回滚问题并优化日志配置
feat(SecurityConfig): 添加Spring Security配置禁用默认认证
docs: 添加详细API文档README_API.md
feat(HelpController): 实现Markdown文档渲染API
style: 清理无用注释和导入
build: 更新pom.xml依赖和插件配置
chore: 优化application.properties配置

src/main/resources/application.properties

@@ -1,61 +1,109 @@
 # 应用服务 WEB 访问端口
 server.port=8080
 spring.application.name=web_project
-spring.datasource.url=jdbc:mysql://localhost:3306/webporject
+
+# 数据库配置
+spring.datasource.url=jdbc:mysql://localhost:3306/webproject?useUnicode=true&characterEncoding=utf-8&useSSL=false&serverTimezone=Asia/Shanghai
 spring.datasource.username=root
 spring.datasource.password=123456
 spring.datasource.driver-class-name=com.mysql.cj.jdbc.Driver
 
-#下面这些内容是为了让MyBatis映射
-#指定Mybatis的Mapper文件
-mybatis.mapper-locations=classpath:mappers/*xml
-#指定Mybatis的实体目录
-mybatis.type-aliases-package=com.qf.myafterprojecy.mybatis.entity
-# 数据库连接池配置
+# 数据库连接池优化配置
 spring.datasource.hikari.maximum-pool-size=10
 spring.datasource.hikari.minimum-idle=5
 spring.datasource.hikari.idle-timeout=300000
 spring.datasource.hikari.connection-timeout=20000
 spring.datasource.hikari.max-lifetime=1200000
-# JPA配置
+spring.datasource.hikari.connection-test-query=SELECT 1
+spring.datasource.hikari.pool-name=WebProjectHikariCP
+
+# JPA配置 - 生产环境建议将ddl-auto改为none
 spring.jpa.hibernate.ddl-auto=update
-spring.jpa.show-sql=true
+spring.jpa.show-sql=false
 spring.jpa.properties.hibernate.format_sql=true
 spring.jpa.properties.hibernate.dialect=org.hibernate.dialect.MySQL8Dialect
 spring.jpa.open-in-view=false
+# JPA性能优化配置
+spring.jpa.properties.hibernate.jdbc.batch_size=30
+spring.jpa.properties.hibernate.order_inserts=true
+spring.jpa.properties.hibernate.order_updates=true
+spring.jpa.properties.hibernate.cache.use_second_level_cache=true
+spring.jpa.properties.hibernate.cache.use_query_cache=true
+
 # 缓存配置
 spring.cache.type=redis
 spring.cache.redis.time-to-live=1800000
 spring.cache.redis.key-prefix=CACHE_
 spring.cache.redis.use-key-prefix=true
 spring.cache.redis.cache-null-values=false
+
 # Redis配置
 spring.redis.host=localhost
 spring.redis.port=6379
-spring.redis.password=
+spring.redis.password=123456
 spring.redis.database=0
 spring.redis.timeout=10000ms
+# Redis连接池优化配置
 spring.redis.lettuce.pool.max-active=8
-spring.redis.lettuce.pool.max-wait=-1ms
+spring.redis.lettuce.pool.max-wait=10000ms
 spring.redis.lettuce.pool.max-idle=8
-spring.redis.lettuce.pool.min-idle=0
+spring.redis.lettuce.pool.min-idle=2
+spring.redis.lettuce.shutdown-timeout=100ms
+
 # 日志配置
 logging.level.root=INFO
 logging.level.com.qf.myafterprojecy=DEBUG
+logging.level.org.springframework.security=INFO
+logging.level.org.hibernate.SQL=WARN
+logging.level.org.hibernate.type.descriptor.sql.BasicBinder=TRACE
+# 日志文件配置
 logging.file.name=logs/web_project.log
 logging.pattern.file=%d{yyyy-MM-dd HH:mm:ss} [%thread] %-5level %logger{36} - %msg%n
 logging.pattern.console=%d{yyyy-MM-dd HH:mm:ss} [%thread] %-5level %logger{36} - %msg%n
-# Actuator配置
-management.endpoints.web.exposure.include=*
-management.endpoint.health.show-details=always
+# Actuator配置 - 生产环境建议限制暴露的端点
+management.endpoints.web.exposure.include=health,info,metrics,prometheus
+management.endpoint.health.show-details=when_authorized
 management.metrics.export.prometheus.enabled=true
-# 安全配置
-# JWT配置
+
+# JWT配置 - 生产环境应使用更安全的密钥和环境变量
 jwt.secret=mySecretKey
 jwt.expiration=86400000
+jwt.header=Authorization
+jwt.token-prefix=Bearer 
 
-# CORS配置
+# CORS配置 - 生产环境应限制允许的源
 cors.allowed-origins=http://localhost:3000
 cors.allowed-methods=GET,POST,PUT,DELETE,OPTIONS
-cors.allowed-headers=*
+cors.allowed-headers=*,
+  Content-Type,
+  X-Requested-With,
+  accept,
+  Origin,
+  Access-Control-Request-Method,
+  Access-Control-Request-Headers,
+  Authorization
 cors.allow-credentials=true
+cors.max-age=3600
+
+# 安全配置增强
+security.basic.enabled=false
+security.ignored=/css/**,/js/**,/images/**,/favicon.ico
+
+# 生产环境建议配置
+# server.ssl.key-store=classpath:keystore.p12
+# server.ssl.key-store-password=password
+# server.ssl.key-store-type=PKCS12
+# server.ssl.key-alias=tomcat
+
+# 会话配置
+server.servlet.session.timeout=30m
+server.session.tracking-modes=cookie
+
+# 国际化配置
+spring.mvc.locale-resolver=fixed
+spring.mvc.locale=zh_CN
+
+# 响应编码配置
+spring.http.encoding.charset=UTF-8
+spring.http.encoding.enabled=true
+spring.http.encoding.force=true