JWT教程_3 oauth和JWT 整合

待我称王封你为后i 2023-01-01 11:50 171阅读 0赞

https://gitee.com/fakerlove/spring-security

# 4. oauth和JWT 整合 #

*  编写jwt 类
    
        package com.example.demo3.config;
        
        import org.springframework.context.annotation.Bean;
        import org.springframework.context.annotation.Configuration;
        import org.springframework.security.jwt.Jwt;
        import org.springframework.security.oauth2.provider.token.TokenStore;
        import org.springframework.security.oauth2.provider.token.store.JwtAccessTokenConverter;
        import org.springframework.security.oauth2.provider.token.store.JwtTokenStore;
        
        @Configuration
        public class JwtTokenStoreConfig { 
        
            @Bean
            public TokenStore tokenStore(){ 
                return new JwtTokenStore(jwtAccessTokenConverter());
            }
        
            @Bean
            public JwtAccessTokenConverter jwtAccessTokenConverter(){ 
                JwtAccessTokenConverter jwtAccessTokenConverter=new JwtAccessTokenConverter();
                jwtAccessTokenConverter.setSigningKey("xxxx");
                return jwtAccessTokenConverter;
            }
        }
 *  编写服务器类
    
        package com.example.demo3.config;
        
        
        
        import com.example.demo3.service.LoginService;
        import org.springframework.beans.factory.annotation.Autowired;
        import org.springframework.beans.factory.annotation.Qualifier;
        import org.springframework.context.annotation.Configuration;
        import org.springframework.security.authentication.AuthenticationManager;
        import org.springframework.security.crypto.password.PasswordEncoder;
        import org.springframework.security.oauth2.config.annotation.configurers.ClientDetailsServiceConfigurer;
        import org.springframework.security.oauth2.config.annotation.web.configuration.AuthorizationServerConfigurerAdapter;
        import org.springframework.security.oauth2.config.annotation.web.configuration.EnableAuthorizationServer;
        import org.springframework.security.oauth2.config.annotation.web.configurers.AuthorizationServerEndpointsConfigurer;
        import org.springframework.security.oauth2.provider.token.TokenStore;
        import org.springframework.security.oauth2.provider.token.store.JwtAccessTokenConverter;
        import org.springframework.security.oauth2.provider.token.store.JwtTokenStore;
        
        /** * 这个是授权服务器 * 功能类似于 微信，qq 等大场企业 */
        @Configuration
        @EnableAuthorizationServer
        public class AuthorizationServiceConfig extends AuthorizationServerConfigurerAdapter { 
        
            @Autowired
            private PasswordEncoder encoder;
        
            @Autowired
            private AuthenticationManager authenticationManager;
        
            @Autowired
            private TokenStore jwtTokenStore;
        
            @Autowired
            private JwtAccessTokenConverter jwtAccessTokenConverter;
        
        
        
            @Autowired
            LoginService service;
            @Override
            public void configure(AuthorizationServerEndpointsConfigurer endpoints) throws Exception { 
               endpoints.authenticationManager(authenticationManager)
                       .userDetailsService(service)
                       .tokenStore(jwtTokenStore)
                       .accessTokenConverter(jwtAccessTokenConverter);
            }
        
            @Override
            public void configure(ClientDetailsServiceConfigurer clients) throws Exception { 
               clients.inMemory()
               .withClient("wechat")
                       .secret(encoder.encode("112233")) // 秘钥
                       .redirectUris("https://www.baidu.com") //重定向服务器配置
                       .scopes("all")// 授权范围
                       .authorizedGrantTypes("authorization_code","password");
            }
        }
 *  编写服务器类
    
        package com.example.demo3.config;
        
        import org.springframework.context.annotation.Configuration;
        import org.springframework.security.config.annotation.web.builders.HttpSecurity;
        import org.springframework.security.oauth2.config.annotation.web.configuration.EnableResourceServer;
        import org.springframework.security.oauth2.config.annotation.web.configuration.ResourceServerConfigurerAdapter;
        
        
        /** * 这个是类似于 微信 qq 等大场的资源 */
        @Configuration
        @EnableResourceServer
        public class ResourceConfig extends ResourceServerConfigurerAdapter { 
            @Override
            public void configure(HttpSecurity http) throws Exception { 
                http.csrf().disable();
                http.authorizeRequests()
                        .anyRequest()
                        .authenticated()
                        .and()
                        .requestMatchers()
                        .antMatchers("/user/**");
            }
        }
 *  编写config
    
        package com.example.demo3.config;
        
        
        import org.springframework.context.annotation.Bean;
        import org.springframework.context.annotation.Configuration;
        import org.springframework.security.authentication.AuthenticationManager;
        import org.springframework.security.config.annotation.web.builders.HttpSecurity;
        import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
        import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
        import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
        import org.springframework.security.crypto.password.PasswordEncoder;
        
        
        @Configuration
        @EnableWebSecurity
        public class SpringSecurityConfig extends WebSecurityConfigurerAdapter { 
            @Override
            protected void configure(HttpSecurity http) throws Exception { 
                http.formLogin()
                        .loginPage("/myLoginController") // 一定要和 Controller 中 返回 myLogin页面 一致，
                        .loginProcessingUrl("/login");// 必须和表单提交 action 的名字 一样的，提交 username 和password
                     // .successForwardUrl("/toSuccess");// 这个是 登录成功后返回的界面
        
                http.authorizeRequests()
                        .antMatchers("/myLoginController").permitAll()// 放行myLoginController
                        .antMatchers("/oauth/**","/login/**","/logout/**").permitAll()
                        .anyRequest().authenticated();
                http.csrf().disable();
        
            }
        
            @Override
            @Bean
            public AuthenticationManager authenticationManager() throws Exception { 
                return  super.authenticationManager();
            }
        
            @Bean
            public PasswordEncoder passwordEncoder(){ 
                return new BCryptPasswordEncoder();
            }
        }
 *  输入
    
        package com.example.demo3.controller;
        
        import org.springframework.stereotype.Controller;
        import org.springframework.web.bind.annotation.RequestMapping;
        
        @Controller
        public class LoginDemo {
        
            @RequestMapping("/myLoginController")
            public String myLogin(){
                return "myLogin";
            }
        
            @RequestMapping("/toSuccess")
            public String toSuccess(){
                return "success";
            }
        
            @RequestMapping("/toFail")
            public String toFail(){
                return "fail";
            }
        
        }
 *  资源网
    
        package com.example.demo3.controller;
        
        
        import org.springframework.security.core.Authentication;
        import org.springframework.web.bind.annotation.RequestMapping;
        import org.springframework.web.bind.annotation.RestController;
        
        @RestController
        @RequestMapping("/user")
        public class UserController { 
        
            @RequestMapping("/getCurrentUser")
            public Object kk(Authentication authentication){ 
                return authentication.getPrincipal();
            }
        }
 *  userDetails
    
        package com.example.demo3.service;
        
        import org.springframework.beans.factory.annotation.Autowired;
        import org.springframework.security.core.authority.AuthorityUtils;
        import org.springframework.security.core.userdetails.User;
        import org.springframework.security.core.userdetails.UserDetails;
        import org.springframework.security.core.userdetails.UserDetailsService;
        import org.springframework.security.core.userdetails.UsernameNotFoundException;
        import org.springframework.security.crypto.password.PasswordEncoder;
        import org.springframework.stereotype.Service;
        
        @Service
        public class LoginService implements UserDetailsService { 
        
            @Autowired
            PasswordEncoder passwordEncoder;
        
            @Override
            public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException { 
                // 自定义 用户登录名
                if(!username.equals("admin")){ 
                    throw  new UsernameNotFoundException("这是俺自己写的错误");
                }
        
                String password=passwordEncoder.encode("123");
                return new User(username,password, AuthorityUtils.commaSeparatedStringToAuthorityList("admin,ROLE_abc"));
            }
        }

![1ab6e1207e47e5e4c1a454b1ad40a932.png][]

[1ab6e1207e47e5e4c1a454b1ad40a932.png]: /images/20221120/7c535a63d28e46b7a01de44a3549adfa.png