spring cloud oauth2 jwt 自定义拓展

短命女 2023-07-04 04:47 31阅读 0赞

spring cloud oauth2 jwt 自定义拓展

**************************

相关类及接口

TokenEnhancer：token增强接口

  1. public interface TokenEnhancer {
  2.     OAuth2AccessToken enhance(OAuth2AccessToken var1, OAuth2Authentication var2);
  3. }

OAuth2AccessToken

  1. public interface OAuth2AccessToken {
  2.     String BEARER_TYPE = "Bearer";
  3.     String OAUTH2_TYPE = "OAuth2";
  4.     String ACCESS_TOKEN = "access_token";
  5.     String TOKEN_TYPE = "token_type";
  6.     String EXPIRES_IN = "expires_in";
  7.     String REFRESH_TOKEN = "refresh_token";
  8.     String SCOPE = "scope";
  10.     Map<String, Object> getAdditionalInformation();
  11.     Set<String> getScope();
  12.     OAuth2RefreshToken getRefreshToken();
  13.     String getTokenType();
  14.     boolean isExpired();
  15.     Date getExpiration();
  16.     int getExpiresIn();
  17.     String getValue();
  18. }

DefaultOAuth2AccessToken：默认的token实现类

  1. public class DefaultOAuth2AccessToken implements Serializable, OAuth2AccessToken {
  2.     private static final long serialVersionUID = 914967629530462926L;
  3.     private String value;
  4.     private Date expiration;
  5.     private String tokenType;
  6.     private OAuth2RefreshToken refreshToken;
  7.     private Set<String> scope;
  8.     private Map<String, Object> additionalInformation;
  10. *************
  11. 构造方法
  13.     public DefaultOAuth2AccessToken(String value) {
  14.         this.tokenType = "Bearer".toLowerCase();
  15.         this.additionalInformation = Collections.emptyMap();
  16.         this.value = value;
  17.     }
  19.     public DefaultOAuth2AccessToken(OAuth2AccessToken accessToken) {
  21. *************
  22. 普通方法
  24.     public void setValue(String value) {
  25.     public void setExpiration(Date expiration) {
  26.     public void setTokenType(String tokenType) {
  27.     public void setRefreshToken(OAuth2RefreshToken refreshToken) {
  28.     public void setScope(Set<String> scope) {
  29.     public void setAdditionalInformation(Map<String, Object> additionalInformation) {
  31.     public String getValue() {
  32.     public int getExpiresIn() {
  33.     public Date getExpiration() {
  34.     public String getTokenType() {
  35.     public OAuth2RefreshToken getRefreshToken() {
  36.     public Set<String> getScope() {
  37.     public Map<String, Object> getAdditionalInformation() {
  39.     public boolean isExpired() {
  40.     public static OAuth2AccessToken valueOf(Map<String, String> tokenParams) {

OAuth2Authentication：认证信息

  1. public class OAuth2Authentication extends AbstractAuthenticationToken {
  2.     private static final long serialVersionUID = -4809832298438307309L;
  3.     private final OAuth2Request storedRequest;
  4.     private final Authentication userAuthentication;
  6. *************
  7. 构造方法
  9.     public OAuth2Authentication(OAuth2Request storedRequest, Authentication userAuthentication) {
  11. *************
  12. 普通方法
  14.     public Object getPrincipal() {
  15.     public boolean isClientOnly() {
  16.     public OAuth2Request getOAuth2Request() {
  17.     public Authentication getUserAuthentication() {
  18.     public boolean isAuthenticated() {
  19.     public void eraseCredentials() {

TokenEnhancerChain：可添加多个tokenEnhancer

  1. public class TokenEnhancerChain implements TokenEnhancer {
  2.     private List<TokenEnhancer> delegates = Collections.emptyList();
  4.     public TokenEnhancerChain() {
  5.     }
  7.     public void setTokenEnhancers(List<TokenEnhancer> delegates) {
  8.         this.delegates = delegates;
  9.     }
  11.     public OAuth2AccessToken enhance(OAuth2AccessToken accessToken, OAuth2Authentication authentication) {
  12.         OAuth2AccessToken result = accessToken;
  14.         TokenEnhancer enhancer;
  15.         for(Iterator var4 = this.delegates.iterator(); var4.hasNext(); result = enhancer.enhance(result, authentication)) {
  16.             enhancer = (TokenEnhancer)var4.next();
  17.         }
  19.         return result;
  20.     }
  21. }

**************************

示例

资源服务器配置参spring cloud oauth2 jwt 使用示例

********************

认证服务器

JwtTokenEnhancer

  1. @Component
  2. public class JwtTokenEnhancer implements TokenEnhancer {
  4.     @Override
  5.     public OAuth2AccessToken enhance(OAuth2AccessToken oAuth2AccessToken, OAuth2Authentication oAuth2Authentication) {
  6.         Map<String,Object> map=new HashMap<>();
  7.         map.put("extension","jwt 拓展信息");
  8.         ((DefaultOAuth2AccessToken)oAuth2AccessToken).setAdditionalInformation(map);
  10.         return oAuth2AccessToken;
  11.     }
  12. }

OAuth2ServerConfiguration：认证服务器配置

  1. @Configuration
  2. @EnableAuthorizationServer
  3. public class OAuth2ServerConfiguration extends AuthorizationServerConfigurerAdapter {
  5.     @Resource
  6.     private AuthenticationManager authenticationManager;
  8.     @Resource
  9.     private BCryptPasswordEncoder passwordEncoder;
  11.     @Resource
  12.     private UserService userService;
  14.     @Resource
  15.     private JwtTokenStore jwtTokenStore;
  17.     @Resource
  18.     private JwtAccessTokenConverter jwtAccessTokenConverter;
  20.     @Resource
  21.     private JwtTokenEnhancer jwtTokenEnhancer;
  23.     public TokenEnhancerChain initTokenEnhancerChain(){
  24.         TokenEnhancerChain tokenEnhancerChain=new TokenEnhancerChain();
  26.         List<TokenEnhancer> list=new ArrayList<>();
  27.         list.add(jwtTokenEnhancer);          //添加自定义tokenEnhancer
  28.         list.add(jwtAccessTokenConverter);   //将token转换为jwt
  29.         tokenEnhancerChain.setTokenEnhancers(list);
  31.         return tokenEnhancerChain;
  32.     }
  34.     @Override
  35.     public void configure(AuthorizationServerEndpointsConfigurer authorizationServerEndpointsConfigurer) throws Exception {
  36.         authorizationServerEndpointsConfigurer
  37.                 .tokenStore(jwtTokenStore)
  38.                 .accessTokenConverter(jwtAccessTokenConverter) //添加tokenConverter
  39.                 .tokenEnhancer(initTokenEnhancerChain())   //添加tokenEnhancerChain
  40.                 .authenticationManager(authenticationManager)
  41.                 .userDetailsService(userService);
  42.     }
  44.     @Override
  45.     public void configure(ClientDetailsServiceConfigurer clients) throws Exception {
  46.         clients.inMemory().withClient("user")
  47.                 .secret(passwordEncoder.encode("123456"))
  48.                 .authorizedGrantTypes("authorization_code","refresh_token")
  49.                 .redirectUris("http://localhost:8082/redirect")
  50.                 .accessTokenValiditySeconds(3000)
  51.                 .autoApprove(true)
  52.                 .scopes("user");
  53.     }
  55.     @Override
  56.     public void configure(AuthorizationServerSecurityConfigurer security) throws Exception {
  57.         security.allowFormAuthenticationForClients()
  58.                 .tokenKeyAccess("isAuthenticated()")    //获取token
  59.                 .checkTokenAccess("isAuthenticated()"); //验证token
  60.     }
  61. }

**************************

使用测试

********************

获取jwt

localhost:8081/oauth/authorize

查询参数：client_id=user&response_type=code&redirect_uri=http://localhost:8082/redirect

  1.      ![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzkzMTYyNQ_size_16_color_FFFFFF_t_70][]

token解码

  1.     ![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzkzMTYyNQ_size_16_color_FFFFFF_t_70 1][]

说明：自定义拓展信息extension已经添加到token中

发表评论

表情：
评论列表 （有 0 条评论，31人围观）

还没有评论，来说两句吧...

相关阅读