前言

原理什么的并不了解(真)，代码先撸出来再说。 github.com/dongkw/spring-demo

思路

oauth2的流程 用graphviz生成的

AuthorizationServer 授权服务器 贴一堆代码没什么意思 都写到注释里了

build.gradle引一堆包

1
2
3
4
5
6
7
8
9
10
11
version = '0.0.1-SNAPSHOT'


dependencies {
    implementation 'org.springframework.boot:spring-boot-starter-security'
    implementation 'org.springframework.cloud:spring-cloud-starter-oauth2'
    implementation 'org.springframework.security:spring-security-jwt'
    api "xyz.jecy.api:user-api:${userApiVersion}"

}

EnableResourceServer 资源服务器

yaml 可以写多行文本 用|-符号

1
2
3
4
5
6
7
8
9
public:
  key: |-
    -----BEGIN PUBLIC KEY-----
    MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDDf9wQAKPUI7bC68PKQ6BKUuOc
    LXLq7QEdT526+gxTO6CzZIcvdI1AtQ3aXFM105p9P9xZAme+v68xdRiVcn2y/1mS
    Y2KkzU9nT+GQa+sV/7i7GIoGdP+CQnoY3gySWx1U4wHXH57r/AujTT8JDSnolU2e
    Pxz18CwTpOgrYnPUMQIDAQAB
    -----END PUBLIC KEY-----

这里面只需要把token设置为jwt类型的 在放上对应的jwt公钥

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
@Configuration
@EnableResourceServer
public class AuthConfig extends ResourceServerConfigurerAdapter {

  @Value("${public.key}")
  private String publicKey;

  @Override
  public void configure(HttpSecurity http) throws Exception {
    http
        .authorizeRequests()
        .antMatchers("/user/auth").permitAll()
        .antMatchers("/user/load").permitAll()
        .anyRequest().authenticated();

  }

  @Override
  public void configure(ResourceServerSecurityConfigurer resources)
      throws Exception {
    resources.tokenServices(tokenServices());
  }


  @Bean
  @Primary
  public DefaultTokenServices tokenServices() {
    DefaultTokenServices defaultTokenServices = new DefaultTokenServices();
    defaultTokenServices.setTokenStore(tokenStore());
    return defaultTokenServices;
  }

  @Bean
  public TokenStore tokenStore() {
    return new JwtTokenStore(accessTokenConverter());
  }

  @Bean
  public JwtAccessTokenConverter accessTokenConverter() {
    JwtAccessTokenConverter converter = new JwtAccessTokenConverter();
    converter.setAccessTokenConverter(new JwtAccessTokenConverter());
    converter.setVerifierKey(publicKey);
    return converter;
  }
}