springboot2.x实现oauth2授权码登陆

参考文章：

一 进行授权页

浏览器输入

二 使用资源站用户登陆

自动跨到资源登陆页，先登陆

 

 

三 授权资源类型

登陆成功后，去授权你的资源，这些资源是在authorizationserverconfig.configure方法里配置的

@override
public void configure(clientdetailsserviceconfigurer clients) throws exception {
clients.inmemory()
.withclient(clientid)
.secret(passwordencoder.encode(clientsecret))
.authorizedgranttypes("authorization_code", "refresh_token",
"password", "implicit")
.scopes("read","write","del","userinfo")
.redirecturis(redirecturls);
}

四 接到code

授权之后，系统会重定向到你的redirect_uri这个页面，并带上唯一的code

五 获取access_token

我们拿着code就要再去授权服务器去获取token了，你可以在你的代码里写这个，也可以手动拿着code，去拼成一个url，再去拿token，就像这下面的实例。

注意向oauth/token发的是post请求，client_id和client_secret如果在url上传递，如果在authorizationserverconfig类的configure方法中开启allowformauthenticationforclients，代码如下

@override
public void configure(authorizationserversecurityconfigurer oauthserver) throws exception {
oauthserver.tokenkeyaccess("permitall()")
.checktokenaccess("isauthenticated()")
.allowformauthenticationforclients();//支持把secret和clientid写在url上，否则需要在头上
}

然后请求后给有下面的响应

authorization ccode------rfrlfy
access_token_url http://localhost:8081/oauth/token?client_id=android1&code=rfrlfy&grant_type=authorization_code&redirect_uri=http://localhost:8081/callback&client_secret=android1
access token response ---------{"access_token":"faadf3bf-6488-4036-bc3b-21b0a979602c","token_type":"bearer","refresh_token":"1b01f133-c5ab-419f-8125-088c85916ecb","expires_in":43187,"scope":"read"}

回调页面代码，主要实现了对code的获取，对access_token的组织，然后请求时把access_token带上，这个方法一般会做成公用的过滤器

@controller
public class usercontroller {
  @requestmapping(value = "/callback", method = requestmethod.get)
  public responseentity<string> callback(@requestparam("code") string code) throws jsonprocessingexception, ioexception {
    responseentity<string> response = null;
    system.out.println("authorization ccode------" + code);
    resttemplate resttemplate = new resttemplate();
    string access_token_url = "http://localhost:8081/oauth/token";
    access_token_url += "?client_id=android1&code=" + code;
    access_token_url += "&grant_type=authorization_code";
    access_token_url += "&redirect_uri=http://localhost:8081/callback";
    access_token_url += "&client_secret=android1";
    system.out.println("access_token_url " + access_token_url);
    response = resttemplate.exchange(access_token_url, httpmethod.post, null, string.class);
    objectmapper mapper = new objectmapper();
    jsonnode node = mapper.readtree(response.getbody());
    string token = node.path("access_token").astext(); system.out.println("access_token" +access_token);

    string url = "http://localhost:8081/index"; httpheaders headers1 = new httpheaders(); headers1.add("authorization", "bearer " + token); httpentity<string> entity = new httpentity<>(headers1); responseentity<string> result = resttemplate.exchange(url, httpmethod.get, entity, string.class); return result; }

六 拿着access_token去请求具体的资源

可以在url地址上直接：http://localhost:8081/index?access_token=faadf3bf-6488-4036-bc3b-21b0a979602c