oauth2+openidconnect 授权身份认证

package com.relive.repository; import com.fasterxml.jackson.core.type.TypeReference; import com.fasterxml.jackson.databind.Module; import com.fasterxml.jackson.databind.ObjectMapper; import org.springframework.jdbc.core.*; import org.springframework.security.jackson2.SecurityJackson2Modules; import org.springframework.security.oauth2.client.registration.ClientRegistration; import org.springframework.security.oauth2.client.registration.ClientRegistrationRepository; import org.springframework.security.oauth2.core.AuthenticationMethod; import org.springframework.security.oauth2.core.AuthorizationGrantType; import org.springframework.security.oauth2.core.ClientAuthenticationMethod; import org.springframework.util.Assert; import org.springframework.util.StringUtils; import java.sql.ResultSet; import java.sql.SQLException; import java.util.*; import java.util.function.Function; /** * OAuth2客户端持久化扩展 * * @author: ReLive * @date: 2022/7/30 22:05 */ public class JdbcClientRegistrationRepository implements ClientRegistrationRepository, Iterable<ClientRegistration> { private static final String COLUMN_NAMES = "registration_id,client_id,client_secret,client_authentication_method,authorization_grant_type,client_name,redirect_uri,scopes,authorization_uri,token_uri,jwk_set_uri,issuer_uri,user_info_uri,user_info_authentication_method,user_name_attribute_name,configuration_metadata"; private static final String TABLE_NAME = "oauth2_client_registered"; private static final String LOAD_CLIENT_REGISTERED_SQL = "SELECT " + COLUMN_NAMES + " FROM " + TABLE_NAME; private static final String LOAD_CLIENT_REGISTERED_QUERY_SQL = LOAD_CLIENT_REGISTERED_SQL + " WHERE "; private static final String INSERT_CLIENT_REGISTERED_SQL = "INSERT INTO " + TABLE_NAME + "(" + COLUMN_NAMES + ") VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)"; private static final String UPDATE_CLIENT_REGISTERED_SQL = "UPDATE " + TABLE_NAME + " SET client_id = ?,client_secret = ?,client_authentication_method = ?,authorization_grant_type = ?,client_name = ?,redirect_uri = ?,scopes = ?,authorization_uri = ?,token_uri = ?,jwk_set_uri = ?,issuer_uri = ?,user_info_uri = ?,user_info_authentication_method = ?,user_name_attribute_name = ?,configuration_metadata = ? WHERE registration_id = ?"; private final JdbcOperations jdbcOperations; private RowMapper<ClientRegistration> clientRegistrationRowMapper; private Function<ClientRegistration, List<SqlParameterValue>> clientRegistrationListParametersMapper; public JdbcClientRegistrationRepository(JdbcOperations jdbcOperations) { Assert.notNull(jdbcOperations, "JdbcOperations can not be null"); this.jdbcOperations = jdbcOperations; this.clientRegistrationRowMapper = new ClientRegistrationRowMapper(); this.clientRegistrationListParametersMapper = new ClientRegistrationParametersMapper(); } @Override public ClientRegistration findByRegistrationId(String registrationId) { Assert.hasText(registrationId, "registrationId cannot be empty"); return this.findBy("registration_id = ?", registrationId); } private ClientRegistration findBy(String filter, Object... args) { List<ClientRegistration> result = this.jdbcOperations.query(LOAD_CLIENT_REGISTERED_QUERY_SQL + filter, this.clientRegistrationRowMapper, args); return !result.isEmpty() ? result.get(0) : null; } public void save(ClientRegistration clientRegistration) { Assert.notNull(clientRegistration, "clientRegistration cannot be null"); ClientRegistration existingClientRegistration = this.findByRegistrationId(clientRegistration.getRegistrationId()); if (existingClientRegistration != null) { this.updateRegisteredClient(clientRegistration); } else { this.insertClientRegistration(clientRegistration); } } private void updateRegisteredClient(ClientRegistration clientRegistration) { List<SqlParameterValue> parameterValues = this.clientRegistrationListParametersMapper.apply(clientRegistration); PreparedStatementSetter statementSetter = new ArgumentPreparedStatementSetter(parameterValues.toArray()); this.jdbcOperations.update(UPDATE_CLIENT_REGISTERED_SQL, statementSetter); } private void insertClientRegistration(ClientRegistration clientRegistration) { List<SqlParameterValue> parameterValues = this.clientRegistrationListParametersMapper.apply(clientRegistration); PreparedStatementSetter statementSetter = new ArgumentPreparedStatementSetter(parameterValues.toArray()); this.jdbcOperations.update(INSERT_CLIENT_REGISTERED_SQL, statementSetter); } public List<ClientRegistration> findAny() { List<ClientRegistration> result = this.jdbcOperations.query(LOAD_CLIENT_REGISTERED_SQL, this.clientRegistrationRowMapper); return result.isEmpty() ? Collections.emptyList() : result; } public Iterator<ClientRegistration> iterator() { return this.findAny().iterator(); } public static class ClientRegistrationRowMapper implements RowMapper<ClientRegistration> { private ObjectMapper objectMapper = new ObjectMapper(); public ClientRegistrationRowMapper() { ClassLoader classLoader = JdbcClientRegistrationRepository.class.getClassLoader(); List<Module> securityModules = SecurityJackson2Modules.getModules(classLoader); this.objectMapper.registerModules(securityModules); } @Override public ClientRegistration mapRow(ResultSet rs, int rowNum) throws SQLException { Set<String> scopes = StringUtils.commaDelimitedListToSet(rs.getString("scopes")); ClientRegistration.Builder builder = ClientRegistration.withRegistrationId(rs.getString("registration_id")) .clientId(rs.getString("client_id")) .clientSecret(rs.getString("client_secret")) .clientAuthenticationMethod(resolveClientAuthenticationMethod(rs.getString("client_authentication_method"))) .authorizationGrantType(resolveAuthorizationGrantType(rs.getString("authorization_grant_type"))) .clientName(rs.getString("client_name")) .redirectUri(rs.getString("redirect_uri")) .scope(scopes) .authorizationUri(rs.getString("authorization_uri")) .tokenUri(rs.getString("token_uri")) .jwkSetUri(rs.getString("jwk_set_uri")) .issuerUri(rs.getString("issuer_uri")) .userInfoUri(rs.getString("user_info_uri")) .userInfoAuthenticationMethod(resolveUserInfoAuthenticationMethod(rs.getString("user_info_authentication_method"))) .userNameAttributeName(rs.getString("user_name_attribute_name")); Map<String, Object> configurationMetadata = this.parseMap(rs.getString("configuration_metadata")); builder.providerConfigurationMetadata(configurationMetadata); return builder.build(); } private static AuthorizationGrantType resolveAuthorizationGrantType(String authorizationGrantType) { if (AuthorizationGrantType.AUTHORIZATION_CODE.getValue().equals(authorizationGrantType)) { return AuthorizationGrantType.AUTHORIZATION_CODE; } else if (AuthorizationGrantType.CLIENT_CREDENTIALS.getValue().equals(authorizationGrantType)) { return AuthorizationGrantType.CLIENT_CREDENTIALS; } else { return AuthorizationGrantType.REFRESH_TOKEN.getValue().equals(authorizationGrantType) ? AuthorizationGrantType.REFRESH_TOKEN : new AuthorizationGrantType(authorizationGrantType); } } private static ClientAuthenticationMethod resolveClientAuthenticationMethod(String clientAuthenticationMethod) { if (Cli