oauth2测试流程

╰半橙微兮° 2023-01-06 11:42 204阅读 0赞

1.申请授权码（get）

http://localhost:8084/oauth/authorize?response_type=code&client_id=app-eureka-customer

2.获取token(post)

http://localhost:8084/oauth/token

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNjM5Mjk2_size_16_color_FFFFFF_t_70_pic_center]  
3.feign请求（token要放入请求头，否则获取不到）  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNjM5Mjk2_size_16_color_FFFFFF_t_70_pic_center 1]  
数据库表结构  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNjM5Mjk2_size_16_color_FFFFFF_t_70_pic_center 2]

数据库配置  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNjM5Mjk2_size_16_color_FFFFFF_t_70_pic_center 3]  
数据库建表语句(sys\_role,sys\_user是自定义)

CREATE SCHEMA IF NOT EXISTS `oauth2` DEFAULT CHARACTER SET utf8 ;
    USE `oauth2` ;
     
    -- -----------------------------------------------------
    -- Table `oauth2`.`clientdetails`
    -- -----------------------------------------------------
    CREATE TABLE IF NOT EXISTS `oauth2`.`clientdetails` (
      `appId` VARCHAR(128) NOT NULL,
      `resourceIds` VARCHAR(256) NULL DEFAULT NULL,
      `appSecret` VARCHAR(256) NULL DEFAULT NULL,
      `scope` VARCHAR(256) NULL DEFAULT NULL,
      `grantTypes` VARCHAR(256) NULL DEFAULT NULL,
      `redirectUrl` VARCHAR(256) NULL DEFAULT NULL,
      `authorities` VARCHAR(256) NULL DEFAULT NULL,
      `access_token_validity` INT(11) NULL DEFAULT NULL,
      `refresh_token_validity` INT(11) NULL DEFAULT NULL,
      `additionalInformation` VARCHAR(4096) NULL DEFAULT NULL,
      `autoApproveScopes` VARCHAR(256) NULL DEFAULT NULL,
      PRIMARY KEY (`appId`))
    ENGINE = InnoDB
    DEFAULT CHARACTER SET = utf8;
     
     
    -- -----------------------------------------------------
    -- Table `oatuh2`.`oauth_access_token`
    -- -----------------------------------------------------
    CREATE TABLE IF NOT EXISTS `oauth2`.`oauth_access_token` (
      `token_id` VARCHAR(256) NULL DEFAULT NULL,
      `token` BLOB NULL DEFAULT NULL,
      `authentication_id` VARCHAR(128) NOT NULL,
      `user_name` VARCHAR(256) NULL DEFAULT NULL,
      `client_id` VARCHAR(256) NULL DEFAULT NULL,
      `authentication` BLOB NULL DEFAULT NULL,
      `refresh_token` VARCHAR(256) NULL DEFAULT NULL,
      PRIMARY KEY (`authentication_id`))
    ENGINE = InnoDB
    DEFAULT CHARACTER SET = utf8;
     
     
    -- -----------------------------------------------------
    -- Table `oatuh2`.`oauth_approvals`
    -- -----------------------------------------------------
    CREATE TABLE IF NOT EXISTS `oauth2`.`oauth_approvals` (
      `userId` VARCHAR(256) NULL DEFAULT NULL,
      `clientId` VARCHAR(256) NULL DEFAULT NULL,
      `scope` VARCHAR(256) NULL DEFAULT NULL,
      `status` VARCHAR(10) NULL DEFAULT NULL,
      `expiresAt` DATETIME NULL DEFAULT NULL,
      `lastModifiedAt` DATETIME NULL DEFAULT NULL)
    ENGINE = InnoDB
    DEFAULT CHARACTER SET = utf8;
     
     
    -- -----------------------------------------------------
    -- Table `oatuh2`.`oauth_client_details`
    -- -----------------------------------------------------
    CREATE TABLE IF NOT EXISTS `oauth2`.`oauth_client_details` (
      `client_id` VARCHAR(128) NOT NULL,
      `resource_ids` VARCHAR(256) NULL DEFAULT NULL,
      `client_secret` VARCHAR(256) NULL DEFAULT NULL,
      `scope` VARCHAR(256) NULL DEFAULT NULL,
      `authorized_grant_types` VARCHAR(256) NULL DEFAULT NULL,
      `web_server_redirect_uri` VARCHAR(256) NULL DEFAULT NULL,
      `authorities` VARCHAR(256) NULL DEFAULT NULL,
      `access_token_validity` INT(11) NULL DEFAULT NULL,
      `refresh_token_validity` INT(11) NULL DEFAULT NULL,
      `additional_information` VARCHAR(4096) NULL DEFAULT NULL,
      `autoapprove` VARCHAR(256) NULL DEFAULT NULL,
      PRIMARY KEY (`client_id`))
    ENGINE = InnoDB
    DEFAULT CHARACTER SET = utf8;
     
     
    -- -----------------------------------------------------
    -- Table `oatuh2`.`oauth_client_token`
    -- -----------------------------------------------------
    CREATE TABLE IF NOT EXISTS `oauth2`.`oauth_client_token` (
      `token_id` VARCHAR(256) NULL DEFAULT NULL,
      `token` BLOB NULL DEFAULT NULL,
      `authentication_id` VARCHAR(128) NOT NULL,
      `user_name` VARCHAR(256) NULL DEFAULT NULL,
      `client_id` VARCHAR(256) NULL DEFAULT NULL,
      PRIMARY KEY (`authentication_id`))
    ENGINE = InnoDB
    DEFAULT CHARACTER SET = utf8;
     
     
    -- -----------------------------------------------------
    -- Table `oatuh2`.`oauth_code`
    -- -----------------------------------------------------
    CREATE TABLE IF NOT EXISTS `oauth2`.`oauth_code` (
      `code` VARCHAR(256) NULL DEFAULT NULL,
      `authentication` BLOB NULL DEFAULT NULL)
    ENGINE = InnoDB
    DEFAULT CHARACTER SET = utf8;
     
     
    -- -----------------------------------------------------
    -- Table `oatuh2`.`oauth_refresh_token`
    -- -----------------------------------------------------
    CREATE TABLE IF NOT EXISTS `oauth2`.`oauth_refresh_token` (
      `token_id` VARCHAR(256) NULL DEFAULT NULL,
      `token` BLOB NULL DEFAULT NULL,
      `authentication` BLOB NULL DEFAULT NULL)
    ENGINE = InnoDB
    DEFAULT CHARACTER SET = utf8;

常见报错：  
1.Full authentication is required to access this resource  
解释：可能请求头里没有token

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNjM5Mjk2_size_16_color_FFFFFF_t_70_pic_center]: /images/20221119/053438fa68d145919b578fd680e33d3b.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNjM5Mjk2_size_16_color_FFFFFF_t_70_pic_center 1]: https://img-blog.csdnimg.cn/20210114135509345.jpg?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNjM5Mjk2,size_16,color_FFFFFF,t_70#pic_center
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNjM5Mjk2_size_16_color_FFFFFF_t_70_pic_center 2]: https://img-blog.csdnimg.cn/20210114150235749.jpg?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNjM5Mjk2,size_16,color_FFFFFF,t_70#pic_center
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNjM5Mjk2_size_16_color_FFFFFF_t_70_pic_center 3]: https://img-blog.csdnimg.cn/20210114150059528.jpg?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNjM5Mjk2,size_16,color_FFFFFF,t_70#pic_center