Spring Security OAuth2.0申请令牌访问/oauth/token时候报401 authentication is required

叁歲伎倆 2023-06-06 10:36 17阅读 0赞

### 问题出处 ###

在访问Spring Security OAuth2.0提供的/oauth/token断点申请令牌报401 authentication is required错误。  
具体场景如下：  
1、使用OAuth2.0的密码模式认证  
2、问题图片如下：  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80NDA2MjMzOQ_size_16_color_FFFFFF_t_70]

### 解决问题 ###

在/oauth/token 的请求中我们指定了client\_id和client\_secret，所以会走ClientCredentialsTokenEndpointFilter，此时需要我们配置支持allowFormAuthenticationForClients。  
在认证服务配置类中进行配置：

@Configuration
    @EnableAuthorizationServer
    public class AuthorizationServer extends AuthorizationServerConfigurerAdapter {
    ...
    ...
        @Override
        public void configure(AuthorizationServerSecurityConfigurer security){
            security
                    .tokenKeyAccess("permitAll()")                    //oauth/token_key是公开
                    .checkTokenAccess("permitAll()")                  //oauth/check_token公开
                    .allowFormAuthenticationForClients()				//表单认证（申请令牌）
            ;
        }
    
    }

重启认证服务，再次测试，一切正常了  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80NDA2MjMzOQ_size_16_color_FFFFFF_t_70 1]  
如果解决了你的问题就请点个赞。

详细代码参考：[https://github.com/pbteach/SpringSecurity/blob/master/distributed-security/distributed-security-uaa/src/main/java/com/pbteach/security/distributed/uaa/config/AuthorizationServer.java][https_github.com_pbteach_SpringSecurity_blob_master_distributed-security_distributed-security-uaa_src_main_java_com_pbteach_security_distributed_uaa_config_AuthorizationServer.java]  
同时也请关注 “跟着燕青学Spring Security认证授权”系列文章。

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80NDA2MjMzOQ_size_16_color_FFFFFF_t_70]: /images/20230601/dbe752085712445fa059af095aa4ad52.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80NDA2MjMzOQ_size_16_color_FFFFFF_t_70 1]: /images/20230601/3ac8cbf3bb7d4dd29e010a15d862ac49.png
[https_github.com_pbteach_SpringSecurity_blob_master_distributed-security_distributed-security-uaa_src_main_java_com_pbteach_security_distributed_uaa_config_AuthorizationServer.java]: https://github.com/pbteach/SpringSecurity/blob/master/distributed-security/distributed-security-uaa/src/main/java/com/pbteach/security/distributed/uaa/config/AuthorizationServer.java