Spring Security OAuth2入门Demo

叁歲伎倆 2022-12-21 12:59 193阅读 0赞

### 文章目录 ###

*  1. 写在前面
 *  2. 项目的目录结构
 *   *  2.1 auth-server模块搭建
     *  2.2 client-user模块搭建
     *  2.3 测试环节
     *   *  2.3.1 授权码模式
         *  2.3.2 隐式授权模式/简化模式
         *  2.3.3 密码模式
         *  2.3.4 客户端模式
 *  3. 参考

# 1. 写在前面 #

项目基于Spring Cloud，需要你对Spring Cloud有所了解，篇幅所限，本文只会列出关键代码，文末会给出完整的项目GIT地址，建议下载下来导入到idea中再进行查看。

# 2. 项目的目录结构 #

![在这里插入图片描述][20201116142456392.png]  
其中`auth-server`为认证模块，`client-user`为资源模块。

## 2.1 auth-server模块搭建 ##

首先需要导入oauth2的包

<dependency>
        <groupId>org.springframework.cloud</groupId>
        <artifactId>spring-cloud-starter-oauth2</artifactId>
    </dependency>

由于token可能需要存放到redis中，所以按需导入Redis的包

<dependency>
        <groupId>org.springframework.boot</groupId>
        <artifactId>spring-boot-starter-data-redis</artifactId>
    </dependency>

客户端的配置信息可以放在内存中，也可以放在DB中，所以按需导入mysql驱动包

<dependency>
        <groupId>mysql</groupId>
        <artifactId>mysql-connector-java</artifactId>
    </dependency>

pom.xml中需要配置mysql和redis的连接信息

spring:
      application:
        name: auth-server
      datasource:
        url: jdbc:mysql://localhost:3306/test?characterEncoding=UTF-8&useSSL=false
        username: test
        password: test
        hikari:
          connection-timeout: 30000
          idle-timeout: 600000
          max-lifetime: 1800000
          maximum-pool-size: 9
      redis:
        database: 2
        host: 192.168.7.128
        port: 6379
        jedis:
          pool:
            max-active: 8
            max-idle: 8
            min-idle: 0
        timeout: 100ms
    
    server:
      port: 6001
    
    
    management:
      endpoint:
        health:
          enabled: true

数据库需要导入如下一张表来存储客户端的注册信息，并初始化3条数据，给出一篇[教程][Link 1]对这个表的字段信息做了详细的解释

-- auto-generated definition
    create table oauth_client_details
    (
        client_id               varchar(256)  not null comment '客户端标识'
            primary key,
        resource_ids            varchar(256)  null comment '资源标识',
        client_secret           varchar(256)  null comment '客户端秘钥',
        scope                   varchar(256)  null,
        authorized_grant_types  varchar(256)  null comment '授权类型 authorization_code：授权码模式 refresh_token：刷新token password：密码模式 implicit：隐私授权模式 client_credentials：客户端模式',
        web_server_redirect_uri varchar(256)  null comment '授权成功后回调URL',
        authorities             varchar(256)  null,
        access_token_validity   int           null comment '访问令牌的有效时间',
        refresh_token_validity  int           null comment '刷新令牌的有效时间',
        additional_information  varchar(4096) null comment '额外的信息，备用',
        autoapprove             varchar(256)  null comment '自动批准标识：0代表不显示授权页面 1显示授权页面'
    );
    
    INSERT INTO test.oauth_client_details (client_id, resource_ids, client_secret, scope, authorized_grant_types, web_server_redirect_uri, authorities, access_token_validity, refresh_token_validity, additional_information, autoapprove) VALUES ('code-client', null, '$2a$10$jENDQZRtqqdr6sXGQK.L0OBADGIpyhtaRfaRDTeLKI76I/Ir1FDn6', 'all', 'authorization_code,refresh_token,password,client_credentials,implicit', 'http://localhost:6102/client-authcode/login', null, 3600, 36000, null, '1');
    INSERT INTO test.oauth_client_details (client_id, resource_ids, client_secret, scope, authorized_grant_types, web_server_redirect_uri, authorities, access_token_validity, refresh_token_validity, additional_information, autoapprove) VALUES ('order-client', null, '$2a$10$GoIOhjqFKVyrabUNcie8d.ADX.qZSxpYbO6YK4L2gsNzlCIxEUDlW', 'all', 'authorization_code,refresh_token,password,client_credentials,implicit', 'http://localhost:6102/client-authcode/login', null, 3600, 36000, null, '1');
    INSERT INTO test.oauth_client_details (client_id, resource_ids, client_secret, scope, authorized_grant_types, web_server_redirect_uri, authorities, access_token_validity, refresh_token_validity, additional_information, autoapprove) VALUES ('user-client', null, '$2a$10$o2l5kA7z.Caekp72h5kU7uqdTDrlamLq.57M1F6ulJln9tRtOJufq', 'all', 'authorization_code,refresh_token,password,client_credentials,implicit', 'http://localhost:6102/client-authcode/login', null, 3600, 36000, null, '1');

下面来写OAuth2的配置，配置比较多，而且部分配置可以自定义，这一块我觉得是OAuth2的难点

首先我们配置密码的加密方式，以及登录是form表单登录还是post登录等信息的类`WebSecurityConfig`，该类需继承`WebSecurityConfigurerAdapter`

@EnableWebSecurity
    public class WebSecurityConfig extends WebSecurityConfigurerAdapter { 
    
        /** * 密码的加密方式 * @return */
        @Bean
        public PasswordEncoder passwordEncoder() { 
            return new BCryptPasswordEncoder();
        }
    
        /** * 也可以自定义密码的加密方式 */
    // @Bean
    // public PasswordEncoder passwordEncoder(){ 
    // return new PasswordEncoder() { 
    //
    // @Override
    // public boolean matches(CharSequence rawPassword, String encodedPassword) { 
    // return encodedPassword.equals(Md5Util.str2Base32MD5((String)rawPassword));
    // }
    //
    // @Override
    // public String encode(CharSequence rawPassword) { 
    // return Md5Util.str2Base32MD5((String)rawPassword);
    // }
    // };
     return PasswordEncoderFactories.createDelegatingPasswordEncoder();
    // }
    
        /** * 授权码模式需要用此对象 * @return * @throws Exception */
        @Bean
        @Override
        public AuthenticationManager authenticationManagerBean() throws Exception { 
            return super.authenticationManagerBean();
        }
    
        /** * 允许匿名访问所有接口 主要是 oauth 接口 * @param http * @throws Exception */
        @Override
        protected void configure(HttpSecurity http) throws Exception { 
            http.formLogin()
                    .and()
                    .authorizeRequests()
                    .antMatchers("/**").permitAll();
        }
    }

要想认证密码是否正确，所以接下来要配置认证类`KiteUserDetailsService`

@Slf4j
    @Component(value = "kiteUserDetailsService")
    public class KiteUserDetailsService implements UserDetailsService { 
    
        @Autowired
        private PasswordEncoder passwordEncoder;
    
        @Override
        public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException { 
            log.info("usernameis:" + username);
            // 查询数据库操作
            if(!username.equals("admin")){ 
                throw new UsernameNotFoundException("the user is not found");
            }else{ 
                // 用户角色也应在数据库中获取
                String role = "ROLE_ADMIN";
                List<SimpleGrantedAuthority> authorities = new ArrayList<>();
                authorities.add(new SimpleGrantedAuthority(role));
                // 线上环境应该通过用户名查询数据库获取加密后的密码
                String password = passwordEncoder.encode("123456");
                // 返回默认的 User
                // return new org.springframework.security.core.userdetails.User(username,password, authorities);
    
                // 返回自定义的 KiteUserDetails
                User user = new User(username,password,authorities);
               return user;
            }
        }
    }

接下来需要配置token的存放模式，token存放模式默认支持如下几种  
![在这里插入图片描述][20201117104337931.png]  
相信看名字你也知道是什么意思，我们这里演示两种存储模式，JWT和Redis

**Redis模式**

@Configuration
    public class RedisTokenStoreConfig { 
    
        @Autowired
        private RedisConnectionFactory redisConnectionFactory;
    
        @Bean
        public TokenStore redisTokenStore (){ 
            return new RedisTokenStore(redisConnectionFactory);
        }
    }

**JWT模式**  
JWT模式是支持我们去扩展token里面的信息的，如下演示了JWT模式如何使用并扩展信息

public class JWTokenEnhancer implements TokenEnhancer { 
    
        @Override
        public OAuth2AccessToken enhance(OAuth2AccessToken oAuth2AccessToken, OAuth2Authentication oAuth2Authentication) { 
            Map<String, Object> info = new HashMap<>();
            info.put("jwt-ext", "JWT 扩展信息");
            ((DefaultOAuth2AccessToken) oAuth2AccessToken).setAdditionalInformation(info);
            return oAuth2AccessToken;
        }
    }

@Configuration
    public class JwtTokenConfig { 
    
        @Bean
        public TokenStore jwtTokenStore() { 
            return new JwtTokenStore(jwtAccessTokenConverter());
        }
    
        @Bean
        public JwtAccessTokenConverter jwtAccessTokenConverter() { 
            JwtAccessTokenConverter accessTokenConverter = new JwtAccessTokenConverter();
            accessTokenConverter.setSigningKey("dev");
            return accessTokenConverter;
        }
    
        @Bean
        public TokenEnhancer jwtTokenEnhancer(){ 
           return new JWTokenEnhancer();
        }
    }

配置好了这些之后组件之后，就要把这些组件和Oauth2结合起来，所以下面的配置类比较的重要

@Configuration
    @EnableAuthorizationServer
    public class OAuth2Config extends AuthorizationServerConfigurerAdapter { 
    
        @Autowired
        public PasswordEncoder passwordEncoder;
    
        @Autowired
        public UserDetailsService kiteUserDetailsService;
    
        @Autowired
        private AuthenticationManager authenticationManager;
    
    // @Autowired
    // private TokenStore redisTokenStore;
    
        @Autowired
        private DataSource dataSource;
    
        @Autowired
        private TokenStore tokenStore;
    
    // @Autowired
    // private JwtAccessTokenConverter jwtAccessTokenConverter;
    //
    // @Autowired
    // private TokenEnhancer jwtTokenEnhancer;
    
        @Override
        public void configure(final AuthorizationServerEndpointsConfigurer endpoints) throws Exception { 
            /** * 普通 jwt 模式 */
    // endpoints.tokenStore(jwtTokenStore)
    // .accessTokenConverter(jwtAccessTokenConverter)
    // .userDetailsService(kiteUserDetailsService)
    // /**
    // * 支持 password 模式
    // */
    // .authenticationManager(authenticationManager);
    
    // /**
    // * jwt 增强模式
    // */
    // TokenEnhancerChain enhancerChain = new TokenEnhancerChain();
    // List<TokenEnhancer> enhancerList = new ArrayList<>();
    // enhancerList.add(jwtTokenEnhancer);
    // enhancerList.add(jwtAccessTokenConverter);
    // enhancerChain.setTokenEnhancers(enhancerList);
    // endpoints.tokenStore(tokenStore)
    // .userDetailsService(kiteUserDetailsService)
    // /**
    // * 支持 password 模式
    // */
    // .authenticationManager(authenticationManager)
    // .tokenEnhancer(enhancerChain)
    // .accessTokenConverter(jwtAccessTokenConverter);
    
            /** * redis token 方式 */
            endpoints.authenticationManager(authenticationManager)
                    .tokenStore(tokenStore)
                    .userDetailsService(kiteUserDetailsService);
    
        }
    
    	/** * 指定客户端信息的来源，可以为DataSource,也可以为Memory * @param clients * @throws Exception */
        @Override
        public void configure(ClientDetailsServiceConfigurer clients) throws Exception { 
    // 客户端的信息来源于数据库中，就是前面让新建的那张oauth_client_details表
    // clients.jdbc(dataSource);
    
    // 客户端信息来源于内存中，生产环境一般不会采用这种模式。一般都是用数据库存放
            clients.inMemory()
                    .withClient("order-client")
                    .secret(passwordEncoder.encode("order-secret-8888"))
                    .authorizedGrantTypes("refresh_token", "authorization_code", "password", "implicit", "client_credentials")
                    .accessTokenValiditySeconds(3600)
                    .scopes("all").redirectUris("http://localhost:6102/client-authcode/login")
                    .and()
                    .withClient("user-client")
                    .secret(passwordEncoder.encode("user-secret-8888"))
                    .authorizedGrantTypes("refresh_token", "authorization_code", "password", "implicit", "client_credentials")
                    .accessTokenValiditySeconds(3600)
                    .scopes("all").redirectUris("http://localhost:6102/client-authcode/login");
        }
    
        @Override
        public void configure(AuthorizationServerSecurityConfigurer security) throws Exception { 
        	// 允许token通过from表单的形式提交
            security.allowFormAuthenticationForClients();
            security.checkTokenAccess("isAuthenticated()");
            security.tokenKeyAccess("isAuthenticated()");
        }
    }

到此，认证端就搭建好了，接下来就配置资源端`client-user`

## 2.2 client-user模块搭建 ##

资源模块配置比较简单，先导包

<dependency>
        <groupId>org.springframework.boot</groupId>
        <artifactId>spring-boot-starter-web</artifactId>
    </dependency>
    <dependency>
        <groupId>org.springframework.cloud</groupId>
        <artifactId>spring-cloud-starter-oauth2</artifactId>
    </dependency>
    
    <dependency>
        <groupId>org.springframework.boot</groupId>
        <artifactId>spring-boot-starter-data-redis</artifactId>
    </dependency>
    
    <dependency>
        <groupId>io.jsonwebtoken</groupId>
        <artifactId>jjwt</artifactId>
        <version>0.9.1</version>
    </dependency>

指定token的存放模式

@Configuration
    @EnableResourceServer
    @EnableGlobalMethodSecurity(prePostEnabled = true)
    public class ResourceServerConfig extends ResourceServerConfigurerAdapter { 
    
        @Value("${security.oauth2.client.client-id}")
        private String clientId;
    
        @Value("${security.oauth2.client.client-secret}")
        private String secret;
    
        @Value("${security.oauth2.authorization.check-token-access}")
        private String checkTokenEndpointUrl;
    
        @Autowired
        private RedisConnectionFactory redisConnectionFactory;
    
        @Bean
        public TokenStore redisTokenStore (){ 
            return new RedisTokenStore(redisConnectionFactory);
        }
    
        @Bean
        public RemoteTokenServices tokenService() { 
            RemoteTokenServices tokenService = new RemoteTokenServices();
            tokenService.setClientId(clientId);
            tokenService.setClientSecret(secret);
            tokenService.setCheckTokenEndpointUrl(checkTokenEndpointUrl);
            return tokenService;
        }
    
        @Override
        public void configure(ResourceServerSecurityConfigurer resources) throws Exception { 
            resources.tokenServices(tokenService());
        }
    
        /**************************** * 以上是 RedisToken 方式的配置 * -------------------------- * 以下是 JWT 方式配置 ****************************/
    
    // @Bean
    // public TokenStore jwtTokenStore() { 
    // return new JwtTokenStore(jwtAccessTokenConverter());
    // }
    //
    // @Bean
    // public JwtAccessTokenConverter jwtAccessTokenConverter() { 
    // JwtAccessTokenConverter accessTokenConverter = new JwtAccessTokenConverter();
    //
    // accessTokenConverter.setSigningKey("dev");
    // accessTokenConverter.setVerifierKey("dev");
    // return accessTokenConverter;
    // }
    //
    // @Autowired
    // private TokenStore jwtTokenStore;
    //
    // @Override
    // public void configure(ResourceServerSecurityConfigurer resources) throws Exception { 
    // resources.tokenStore(jwtTokenStore);
    // }
    }

随便弄一个访问地址

@Slf4j
    @RestController
    public class UserController { 
    
        @GetMapping(value = "get")
        //@PreAuthorize("hasAuthority('ROLE_ADMIN')")
        @PreAuthorize("hasAnyRole('ROLE_ADMIN')")
        public Object get(Authentication authentication){ 
            //Authentication authentication = SecurityContextHolder.getContext().getAuthentication();
            authentication.getCredentials();
            OAuth2AuthenticationDetails details = (OAuth2AuthenticationDetails)authentication.getDetails();
            String token = details.getTokenValue();
            return token;
        }
    
        @GetMapping(value = "jwt")
        @PreAuthorize("hasAnyRole('ROLE_ADMIN')")
        public Object jwtParser(Authentication authentication){ 
            authentication.getCredentials();
            OAuth2AuthenticationDetails details = (OAuth2AuthenticationDetails)authentication.getDetails();
            String jwtToken = details.getTokenValue();
            Claims claims = Jwts.parser()
                    .setSigningKey("dev".getBytes(StandardCharsets.UTF_8))
                    .parseClaimsJws(jwtToken)
                    .getBody();
            return claims;
        }
    }

资源端也搭建完毕了，接下来就是测试环节

## 2.3 测试环节 ##

把两个项目运行起来，先请求一下资源端的URL，会发现请求不了。  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxMzI5MzM0MzI_size_16_color_FFFFFF_t_70_pic_center]  
报错未经授权的，接下来我们来演示客户端模式如何获取一个授权码

### 2.3.1 授权码模式 ###

先请求code，浏览器访问URL:

> http://localhost:6001/oauth/authorize?client\_id=order-client&response\_type=code&redirect\_uri=http://localhost:6102/client-authcode/login

通过用户名密码登录，用户名密码是代码里面配置的admin，123456  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxMzI5MzM0MzI_size_16_color_FFFFFF_t_70]  
登录之后进入授权页面  
![在这里插入图片描述][20201117114948516.png]  
点击Approve授权，接下来看地址栏会得到一串地址，里面包含了code

> http://localhost:6102/client-authcode/login?code=eq3fzx

接下来用使用这个code去请求token，通过postman请求url

> http://localhost:6001/oauth/token?grant\_type=authorization\_code&client=order-client&code=eq3fzx&redirect\_uri=http://localhost:6102/client-authcode/login

同时需要在头部里面附上`Authorization`，Authorization的值为  
Basic + 空格 + base64(client\_id:client\_secret)，可以通过 https://www.sojson.com/base64.html 网站在线做 base64 编码。  
我这里的client\_id: order-client，client\_secret: order-secret-8888，通过base64编码的结果为：`b3JkZXItY2xpZW50Om9yZGVyLXNlY3JldC04ODg4`，所以Authorization的值为`Basic b3JkZXItY2xpZW50Om9yZGVyLXNlY3JldC04ODg4`  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxMzI5MzM0MzI_size_16_color_FFFFFF_t_70 1]  
请求之后得到一个access\_token，通过这个tokend再去请求资源端获取资源  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxMzI5MzM0MzI_size_16_color_FFFFFF_t_70 2]  
资源获取成功了，接下来说隐式授权/简化模式模式

### 2.3.2 隐式授权模式/简化模式 ###

浏览器访问URL:

> http://localhost:6001/oauth/authorize?client\_id=order-client&response\_type=token&redirect\_uri=http://localhost:6102/client-authcode/login

输入admin，123456登录之后进入授权页面，点击Approve授权，接下来看地址栏会得到一串地址

http://localhost:6102/client-authcode/login#access_token=c198d8d4-476b-4473-b09f-20c5580b64cd&token_type=bearer&expires_in=3599&scope=all

里面包含了access\_token，接下来通过`access_token`去获取资源端的资源，记得Authorization需要为`bearer`\+`空格`\+`access_token`  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxMzI5MzM0MzI_size_16_color_FFFFFF_t_70 3]  
获取资源成功了

### 2.3.3 密码模式 ###

通过postman 请求URL：

> http://localhost:6001/oauth/token?grant\_type=password&username=admin&password=123456&scope=all

同时需要在头部里面附上`Authorization`，Authorization的值为  
Basic + 空格 + base64(client\_id:client\_secret)，可以通过 https://www.sojson.com/base64.html 网站在线做 base64 编码。  
我这里的client\_id: order-client，client\_secret: order-secret-8888，通过base64编码的结果为：`b3JkZXItY2xpZW50Om9yZGVyLXNlY3JldC04ODg4`，所以Authorization的值为`Basic b3JkZXItY2xpZW50Om9yZGVyLXNlY3JldC04ODg4`  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxMzI5MzM0MzI_size_16_color_FFFFFF_t_70_pic_center 1]  
请求之后会返回一串access\_token，通过这个token去请求资源端  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxMzI5MzM0MzI_size_16_color_FFFFFF_t_70 4]  
请求成功

### 2.3.4 客户端模式 ###

请求URL

> http://localhost:6001/oauth/token?grant\_type=client\_credentials&client\_id=order-client&client\_secret=order-secret-8888

*  grant\_type为client\_credentials代表客户端模式
 *  client\_id 为 order-client是我们在代码里面配置的
 *  client\_secret 为order-secret-8888也是我们代码里面配置的，代表客户端秘钥

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxMzI5MzM0MzI_size_16_color_FFFFFF_t_70_pic_center 2]

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxMzI5MzM0MzI_size_16_color_FFFFFF_t_70_pic_center 3]  
获取到了`access_token`之后就可以请求资源了

# 3. 参考 #

https://www.bilibili.com/video/BV1EE411u7YV?p=61  
https://mp.weixin.qq.com/s/r3G8Te9f9uXSbf8YaUV6MA

[20201116142456392.png]: /images/20221120/e06285488ce042e8aa3561dba8617389.png
[Link 1]: https://www.jianshu.com/p/c1c6c966c3a7
[20201117104337931.png]: /images/20221120/701d3366ef424f9cb40630d37e2006b7.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxMzI5MzM0MzI_size_16_color_FFFFFF_t_70_pic_center]: /images/20221120/ad7bd986e5bd4648a5f941891af8e081.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxMzI5MzM0MzI_size_16_color_FFFFFF_t_70]: /images/20221120/f90bc49b7a55460abab409764352ac74.png
[20201117114948516.png]: /images/20221120/149749704e65410f9d070cc3dc486674.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxMzI5MzM0MzI_size_16_color_FFFFFF_t_70 1]: https://img-blog.csdnimg.cn/20201117135515522.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxMzI5MzM0MzI=,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxMzI5MzM0MzI_size_16_color_FFFFFF_t_70 2]: https://img-blog.csdnimg.cn/20201117135921205.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxMzI5MzM0MzI=,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxMzI5MzM0MzI_size_16_color_FFFFFF_t_70 3]: https://img-blog.csdnimg.cn/20201117115451869.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxMzI5MzM0MzI=,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxMzI5MzM0MzI_size_16_color_FFFFFF_t_70_pic_center 1]: https://img-blog.csdnimg.cn/20201117140606252.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxMzI5MzM0MzI=,size_16,color_FFFFFF,t_70#pic_center
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxMzI5MzM0MzI_size_16_color_FFFFFF_t_70 4]: https://img-blog.csdnimg.cn/20201117140854498.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxMzI5MzM0MzI=,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxMzI5MzM0MzI_size_16_color_FFFFFF_t_70_pic_center 2]: https://img-blog.csdnimg.cn/20201117113958352.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxMzI5MzM0MzI=,size_16,color_FFFFFF,t_70#pic_center
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxMzI5MzM0MzI_size_16_color_FFFFFF_t_70_pic_center 3]: https://img-blog.csdnimg.cn/20201117113550490.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxMzI5MzM0MzI=,size_16,color_FFFFFF,t_70#pic_center