SpringBoot集成使用教程源码

package com.mirson.spring.boot.security.oauth.config; import com.mirson.spring.boot.security.oauth.po.OAuthUser; import lombok.SneakyThrows; import lombok.extern.log4j.Log4j2; import org.springframework.beans.factory.annotation.Autowired; import org.springframework.context.annotation.Bean; import org.springframework.context.annotation.Configuration; import org.springframework.data.redis.connection.RedisConnectionFactory; import org.springframework.data.redis.core.RedisTemplate; import org.springframework.data.redis.serializer.JdkSerializationRedisSerializer; import org.springframework.data.redis.serializer.StringRedisSerializer; import org.springframework.http.HttpMethod; import org.springframework.security.authentication.AuthenticationManager; import org.springframework.security.core.userdetails.UserDetailsService; import org.springframework.security.oauth2.common.DefaultOAuth2AccessToken; import org.springframework.security.oauth2.config.annotation.configurers.ClientDetailsServiceConfigurer; import org.springframework.security.oauth2.config.annotation.web.configuration.AuthorizationServerConfigurerAdapter; import org.springframework.security.oauth2.config.annotation.web.configuration.EnableAuthorizationServer; import org.springframework.security.oauth2.config.annotation.web.configurers.AuthorizationServerEndpointsConfigurer; import org.springframework.security.oauth2.config.annotation.web.configurers.AuthorizationServerSecurityConfigurer; import org.springframework.security.oauth2.provider.ClientDetailsService; import org.springframework.security.oauth2.provider.OAuth2Authentication; import org.springframework.security.oauth2.provider.client.InMemoryClientDetailsService; import org.springframework.security.oauth2.provider.token.DefaultAuthenticationKeyGenerator; import org.springframework.security.oauth2.provider.token.TokenEnhancer; import org.springframework.security.oauth2.provider.token.TokenEnhancerChain; import org.springframework.security.oauth2.provider.token.TokenStore; import org.springframework.security.oauth2.provider.token.store.JwtAccessTokenConverter; import org.springframework.security.oauth2.provider.token.store.JwtTokenStore; import org.springframework.security.oauth2.provider.token.store.redis.RedisTokenStore; import java.util.Arrays; import java.util.HashMap; import java.util.Map; @Configuration @EnableAuthorizationServer @Log4j2 public class AuthorizationServerConfig extends AuthorizationServerConfigurerAdapter { public static final String OAUTH_KEY_CLIENT_DETAILS = "boot:oauth:client:details"; /** * 用户信息前缀 */ public static final String OAUTH_KEY_USER_DETAILS = "boot:oauth:user_details"; /** * oauth 相关前缀 */ public static final String OAUTH_PREFIX_KEY = "boot:oauth:"; /** * 客户端模式 */ public static final String OAUTH_CLIENT_CREDENTIALS = "client_credentials"; /** * 签名密钥 */ public static final String OAUTH_SIGN_KEY = "sign_secret"; @Autowired private UserDetailsService authCustomUserDetailService; @Autowired private AuthenticationManager authenticationManager; @Autowired private RedisConnectionFactory redisConnectionFactory; /** * Redis 缓存配置 * @return */ @Bean public RedisTemplate<String, Object> stockRedisTemplate() { RedisTemplate<String, Object> redisTemplate = new RedisTemplate<>(); redisTemplate.setKeySerializer(new StringRedisSerializer()); redisTemplate.setHashKeySerializer(new StringRedisSerializer()); redisTemplate.setValueSerializer(new JdkSerializationRedisSerializer()); redisTemplate.setHashValueSerializer(new JdkSerializationRedisSerializer()); redisTemplate.setConnectionFactory(redisConnectionFactory); return redisTemplate; } /** * 防止申请token时出现401错误 * @param oauthServer */ @Override public void configure(AuthorizationServerSecurityConfigurer oauthServer) { oauthServer .tokenKeyAccess("permitAll()") .checkTokenAccess("permitAll()") .allowFormAuthenticationForClients(); } @Override public void configure(ClientDetailsServiceConfigurer clients) throws Exception { clients.inMemory() .withClient("demo") .secret("4QrcOUm6Wau+VuBX8g+IPg==") .authorizedGrantTypes("password", "authorization_code"); } /** * 认证服务配置 * @param endpoints */ @Override public void configure(AuthorizationServerEndpointsConfigurer endpoints) { // 自定义token生成方式 TokenEnhancerChain tokenEnhancerChain = new TokenEnhancerChain(); tokenEnhancerChain.setTokenEnhancers(Arrays.asList(tokenEnhancer(), accessTokenConverter())); endpoints .allowedTokenEndpointRequestMethods(HttpMethod.GET, HttpMethod.POST) .tokenStore(redisTokenStore()) .tokenEnhancer(tokenEnhancerChain) .userDetailsService(authCustomUserDetailService) .authenticationManager(authenticationManager) .reuseRefreshTokens(false); } /** * TokenStore实现方式， 采用Redis缓存 * @return */ @Bean public TokenStore tokenStore() { RedisTokenStore tokenStore = new RedisTokenStore(redisConnectionFactory); tokenStore.setPrefix(OAUTH_PREFIX_KEY); tokenStore.setAuthenticationKeyGenerator(new DefaultAuthenticationKeyGenerator() { @Override public String extractKey(OAuth2Authentication authentication) { return super.extractKey(authentication); } }); return tokenStore; } /** * JWT TOKEN配置，采用签名密钥 * */ @Bean public JwtAccessTokenConverter accessTokenConverter() { JwtAccessTokenConverter converter = new JwtAccessTokenConverter(); converter.setSigningKey(OAUTH_SIGN_KEY); return converter; } /** * TokenStore实现方式， 采用Redis缓存 * @return */ @Bean public TokenStore redisTokenStore() { RedisTokenStore tokenStore = new RedisTokenStore(redisConnectionFactory); tokenStore.setPrefix(OAUTH_PREFIX_KEY); tokenStore.setAuthenticationKeyGenerator(new DefaultAuthenticationKeyGenerator() { @Override public String extractKey(OAuth2Authentication authentication) { return super.extractKey(authentication); } }); return tokenStore; } /** * token增强处理， 支持扩展信息 * @return TokenEnhancer */ @Bean public TokenEnhancer tokenEnhancer() { return (accessToken, authentication) -> { try { if (OAUTH_CLIENT_CREDENTIALS .equals(authentication.getOAuth2Request().getGrantType())) { return accessToken; } final Map<String, Object> additionalInfo = new HashMap<>(16); OAuthUser authUser = (OAuthUser) authentication.getUserAuthentication().getPrincipal(); if (null != authUser) { // 放入扩展信息 additionalInfo.put("oauth_user_id", authUser.getId()); additionalInfo.put("oauth_user_date", authUser.getCreateTime()); additionalInfo.put("active", true); } ((DefaultOAuth2AccessToken) accessToken).setAdditionalInformation(additionalInfo); }catch(Exception e) { log.error(e.getMessage(), e); } return accessToken; }; } }