Spring boot下自定义spring oauth2的授权页面

怼烎@ 2022-04-04 13:52 592阅读 0赞

### [Spring boot下自定义spring oauth2的授权页面][Spring boot_spring oauth2] ###

[WhitelabelApprovalEndpoint][][/oauth/confirm\_access][oauth_confirm_access][WhitelabelErrorEndpoint][][/oauth/error][oauth_error]

自定义WhitelabelApprovalEndpoint的/oauth/confirm\_access页面内容有两种方法：

1.  通过在@Controller注解的类下再添加@SessionAttributes("authorizationRequest")注解.Java代码  ![收藏代码][20181217173033461]
    
    1.  import javax.servlet.http.HttpServletRequest;  
    2.    
    3.  import org.springframework.stereotype.Controller;  
    4.  import org.springframework.web.bind.annotation.RequestMapping;  
    5.  import org.springframework.web.bind.annotation.SessionAttributes;  
    6.    
    7.  @Controller  
    8.  @SessionAttributes("authorizationRequest")  
    9.  public class OAuth2ApprovalController \{  
    10.   
    11.   @RequestMapping("/oauth/confirm\_access")  
    12.   public String getAccessConfirmation(Map<String, Object> model, HttpServletRequest request)  
    13.       throws Exception \{  
    14.   
    15.     return "oauth/oauth\_approval";  
    16.   \}  
    17.   
    18. \}  
    
     需要注意的地方是@Controller下必须有@SessionAttributes注解，以及相同的@RequestMapping("/oauth/confirm\_access")地址。
2.  另一种是直接在AuthorizationServerEndpointsConfigurer类下通过pathMapping(default,new)来映射新的地址Java代码  ![收藏代码][20181217173033461]
    
    1.  @Configuration  
    2.  @EnableAuthorizationServer  
    3.  public class OAuth2Config extends AuthorizationServerConfigurerAdapter \{  
    4.    
    5.    @Resource(name = "mongoClientDetailsService")  
    6.    protected ClientDetailsService clientDetailsService;  
    7.    
    8.    @Resource(name = "mongoAuthorizationCodeServices")  
    9.    protected AuthorizationCodeServices authorizationCodeServices;  
    10.   
    11.   @Resource  
    12.   protected AuthenticationManager authenticationManager;  
    13.   
    14.   protected OAuth2RequestFactory requestFactory;  
    15.   
    16.   @Resource(name = "oAuth2AccessDeniedHandler")  
    17.   AccessDeniedHandler accessDeniedHandler;  
    18.   
    19.   
    20.   @Bean(name = "tokenStore")  
    21.   public TokenStore tokenStore() \{  
    22.     return new MongoTokenStore();  
    23.   \}  
    24.   
    25.   @Bean  
    26.   public ApprovalStore approvalStore() \{  
    27.     TokenApprovalStore approvalStore = new TokenApprovalStore();  
    28.     approvalStore.setTokenStore(tokenStore());  
    29.     return approvalStore;  
    30.   \}  
    31.   
    32.   
    33.   
    34.   // AuthenticationSuccessHandler authenticationSuccessHandler() \{  
    35.   // return new OAuth2AuthenticationSuccessHandler();  
    36.   // \}  
    37.   
    38.   // AuthenticationFailureHandler authenticationFailureHandler() \{  
    39.   // return new OAuth2AuthenticationFailureHandler();  
    40.   // \}  
    41.   
    42.   
    43.   @Override  
    44.   public void configure(ClientDetailsServiceConfigurer clients) throws Exception \{  
    45.     clients.withClientDetails(clientDetailsService);  
    46.   \}  
    47.   
    48.   
    49.   @Override  
    50.   public void configure(AuthorizationServerSecurityConfigurer oauthServer) throws Exception \{  
    51.     // 允许表单鉴权  
    52.     oauthServer.allowFormAuthenticationForClients().accessDeniedHandler(accessDeniedHandler);  
    53.   \}  
    54.   
    55.   private AuthorizationServerTokenServices tokenServices() \{  
    56.     CusTokenServices tokenServices = new CusTokenServices();  
    57.     tokenServices.setTokenStore(tokenStore());  
    58.     tokenServices.setSupportRefreshToken(true);  
    59.     tokenServices.setClientDetailsService(clientDetailsService);  
    60.     return tokenServices;  
    61.   \}  
    62.   
    63.   private OAuth2RequestFactory requestFactory() \{  
    64.     if (requestFactory != null) \{  
    65.       return requestFactory;  
    66.     \}  
    67.     requestFactory = new DefaultOAuth2RequestFactory(clientDetailsService);  
    68.     return requestFactory;  
    69.   \}  
    70.   
    71.   private TokenGranter tokenGranter() throws Exception \{  
    72.     List<TokenGranter> tokenGranters = new ArrayList<TokenGranter>();  
    73.     tokenGranters.add(new AuthorizationCodeTokenGranter(tokenServices(), authorizationCodeServices,  
    74.         clientDetailsService, requestFactory()));  
    75.     tokenGranters  
    76.         .add(new RefreshTokenGranter(tokenServices(), clientDetailsService, requestFactory()));  
    77.     tokenGranters  
    78.         .add(new ImplicitTokenGranter(tokenServices(), clientDetailsService, requestFactory()));  
    79.     tokenGranters.add(  
    80.         new ClientCredentialsTokenGranter(tokenServices(), clientDetailsService, requestFactory()));  
    81.     tokenGranters.add(new ResourceOwnerPasswordTokenGranter(authenticationManager, tokenServices(),  
    82.         clientDetailsService, requestFactory()));  
    83.     TokenGranter tokenGranter = new CompositeTokenGranter(tokenGranters);  
    84.     return tokenGranter;  
    85.   \}  
    86.   
    87.   
    88.   
    89.   @Override  
    90.   public void configure(AuthorizationServerEndpointsConfigurer endpoints) throws Exception \{  
    91.     endpoints.approvalStore(approvalStore()).authorizationCodeServices(authorizationCodeServices)  
    92.         .tokenStore(tokenStore()).tokenGranter(tokenGranter());  
    93.     endpoints.pathMapping("/oauth/confirm\_access", "/extenal/oauth/confirm\_access");  
    94.   
    95.   \}  
    96.   
    97. \}  
    
     再添加一个普通的@Controller类即可Java代码  ![收藏代码][20181217173033461]
    
    1.  @Controller  
    2.  //@SessionAttributes("authorizationRequest")  
    3.  public class OAuth2ApprovalController \{  
    4.    
    5.    @RequestMapping("/oauth/confirm\_access")  
    6.    public String getAccessConfirmation(Map<String, Object> model, HttpServletRequest request)  
    7.        throws Exception \{  
    8.    
    9.      return "oauth/oauth\_approval";  
    10.   \}  
    11.   
    12. \}  
    
     此种方式不需要再配置@SessionAttributes注解了

自定义了WhitelabelApprovalEndpoint后，那么WhitelabelErrorEndpoint就不多说了。

[Spring boot_spring oauth2]: https://conkeyn.iteye.com/blog/2296406
[WhitelabelApprovalEndpoint]: http://www.iteye.com/blogs/tag/WhitelabelApprovalEndpoint
[oauth_confirm_access]: http://www.iteye.com/blogs/tag/%2Foauth%2Fconfirm_access
[WhitelabelErrorEndpoint]: http://www.iteye.com/blogs/tag/WhitelabelErrorEndpoint
[oauth_error]: http://www.iteye.com/blogs/tag/%2Foauth%2Ferror
[20181217173033461]: /images/20220404/c066509de37a48719204dfdef945bc1a.png