详解SpringbootOauth2Server搭建Oauth2认证服务源码⽐较全⾯，教程我就只介绍关键代码了，喜欢的点个star，谢谢！
关键词
微服务认证
Oauth2
认证中⼼
springboot
spring-cloud-starter-oauth2
集成Oauth2
Oauth2 客户端
介绍
这⾥我将介绍两个部分
Oauth2 server 的开发（hi-auth-web模块）
Oauth2 client 的开发（hi-mall-web模块）
效果图
himall.gif
umc.gif
LIVE DEMO
Oauth2 server 搭建
数据库表（mysql5.6），其中只有sys_user表由我们⾃⼰控制，其他表由框架控制
CREATE TABLE `clientdetails` (
`appId` varchar(255) NOT NULL,
`resourceIds` varchar(256) DEFAULT NULL,
`appSecret` varchar(256) DEFAULT NULL,
`scope` varchar(256) DEFAULT NULL,
`grantTypes` varchar(256) DEFAULT NULL,
`redirectUrl` varchar(256) DEFAULT NULL,
`authorities` varchar(256) DEFAULT NULL,
`access_token_validity` int(11) DEFAULT NULL,
`refresh_token_validity` int(11) DEFAULT NULL,
`additionalInformation` varchar(4096) DEFAULT NULL,
`autoApproveScopes` varchar(256) DEFAULT NULL,
PRIMARY KEY (`appId`)
) ENGINE=InnoDB DEFAULT CHARSET=utf8;
CREATE TABLE `oauth_access_token` (
`token_id` varchar(256) DEFAULT NULL,
`token` blob,
`authentication_id` varchar(255) NOT NULL,
`user_name` varchar(256) DEFAULT NULL,
`client_id` varchar(256) DEFAULT NULL,
`authentication` blob,
`refresh_token` varchar(256) DEFAULT NULL,
PRIMARY KEY (`authentication_id`)
) ENGINE=InnoDB DEFAULT CHARSET=utf8;
CREATE TABLE `oauth_approvals` (
`userId` varchar(256) DEFAULT NULL,
`clientId` varchar(256) DEFAULT NULL,
`scope` varchar(256) DEFAULT NULL,
`status` varchar(10) DEFAULT NULL,
`expiresAt` timestamp NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
`lastModifiedAt` timestamp NOT NULL DEFAULT '0000-00-00 00:00:00'
) ENGINE=InnoDB DEFAULT CHARSET=utf8;
CREATE TABLE `oauth_client_details` (
`client_id` varchar(255) NOT NULL,
`resource_ids` varchar(256) DEFAULT NULL,
`client_secret` varchar(256) DEFAULT NULL,
`scope` varchar(256) DEFAULT NULL,
`authorized_grant_types` varchar(256) DEFAULT NULL,
`web_server_redirect_uri` varchar(2560) DEFAULT NULL,
`authorities` varchar(256) DEFAULT NULL,
`access_token_validity` int(11) DEFAULT NULL,
`refresh_token_validity` int(11) DEFAULT NULL,
`additional_information` varchar(4096) DEFAULT NULL,
`autoapprove` varchar(256) DEFAULT NULL,
PRIMARY KEY (`client_id`)
) ENGINE=InnoDB DEFAULT CHARSET=utf8;
INSERT INTO `oauth_client_details` VALUES ('client', null, '$2a$10$1N/.LvTJuYpvxDzoJ1KdvuPDdV/kDSQE9Cxm9BzB1PreyzK6gmFRe', 'ALL,AUTH,USER,GOODS,ORDER', 'authorization_code,client_credentials,password,refresh_token', 'localhost:808 CREATE TABLE `oauth_client_token` (
`token_id` varchar(256) DEFAULT NULL,
`token` blob,
`authentication_id` varchar(255) NOT NULL,
`user_name` varchar(256) DEFAULT NULL,
`client_id` varchar(256) DEFAULT NULL,
PRIMARY KEY (`authentication_id`)
) ENGINE=InnoDB DEFAULT CHARSET=utf8;
CREATE TABLE `oauth_code` (
`code` varchar(256) DEFAULT NULL,
`authentication` blob
) ENGINE=InnoDB DEFAULT CHARSET=utf8;
CREATE TABLE `oauth_refresh_token` (
`token_id` varchar(256) DEFAULT NULL,
`token` blob,
`authentication` blob
)
ENGINE=InnoDB DEFAULT CHARSET=utf8;
CREATE TABLE `sys_user` (
`id` bigint(20) NOT NULL,
`name` varchar(20) DEFAULT NULL,
`username` varchar(20) NOT NULL,
`password` varchar(128) NOT NULL,
`tel` varchar(20) DEFAULT NULL,
`gender` varchar(10) DEFAULT NULL,
`createTime` datetime DEFAULT NULL,
PRIMARY KEY (`id`),
UNIQUE KEY `unique_username` (`username`),
UNIQUE KEY `unique_tel` (`tel`)
) ENGINE=InnoDB DEFAULT CHARSET=utf8;
INSERT INTO `sys_user` VALUES ('1', '张三', 'admin', '123456', '137********', 'MALE', '2018-12-03 17:57:12');
INSERT INTO `sys_user` VALUES ('2', '李四', 'user', '123456', '138********', 'UNKNOWN', '2018-12-03 17:57:12');
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-web</artifactId>
</dependency>
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-security</artifactId>
</dependency>
<dependency>
<groupId>org.springframework.cloud</groupId>
<artifactId>spring-cloud-starter-oauth2</artifactId>
<version>2.0.1.RELEASE</version>
</dependency>
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-thymeleaf</artifactId>
</dependency>
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-jdbc</artifactId>
</dependency>
<dependency>
<groupId>mysql</groupId>
<artifactId>mysql-connector-java</artifactId>
</dependency>
<dependency>
<groupId&batis.spring.boot</groupId>
<artifactId>mybatis-spring-boot-starter</artifactId>
<version>2.0.0</version>
</dependency>
添加表sys_user的service、mapper
@Mapper
public interface UserMapper {
@Insert("INSERT INTO sys_user(id,name,username,password,tel,gender,createTime) VALUES(#{id},#{name},#{username},#{password},#{tel},#{gender},#{createTime})")
void insert(User user);
@Delete("DELETE FROM sys_user WHERE id = #{id}")
void delete(Long id);
@Update("UPDATE sys_user SET name=#{name},username=#{username},password=#{password},tel=#{tel},gender=#{gender},createTime=#{createTime} WHERE id =#{id}")  int update(User user);
@ResultMap("BaseResultMap")
@Select("SELECT * FROM sys_user WHERE id=#{id}")
User findById(Long id);
@ResultMap("BaseResultMap")
@Select("SELECT * FROM sys_user WHERE username=#{username}")
User findByUsername(String username);
@ResultMap("BaseResultMap")
@Select("SELECT * FROM sys_user WHERE tel=#{tel}")
User findByTel(String tel);
@ResultMap("BaseResultMap")
@Select("SELECT * FROM sys_user")
List<User> findAll();
@ResultMap("BaseResultMap")
@Select("SELECT * FROM sys_user WHERE name like #{name}")
List<User> findByName(String name);
}
@Service
public class UserServiceImpl implements UserService {
@Resource
UserMapper mapper;
@Override
public User save(User user) {
Id()!=null){
mapper.update(user);
} else {
user.setId(System.currentTimeMillis());
mapper.insert(user);
}
return user;
}
@Override
public User findById(Long id) {
return mapper.findById(id);
}
@Override
public User findByUsername(String username) {
return mapper.findByUsername(username);
}
@Override
public User findByTel(String tel) {
return mapper.findByTel(tel);
}
@Override
public List<User> findAll() {
return mapper.findAll();
}
@Override
public void delete(Long id) {
mapper.delete(id);
}
@Override
public List<User> findByName(String name) {
return mapper.findByName("%" + name + "%");
}
}
添加登录拦截
@Configuration
@EnableWebSecurity
@EnableGlobalMethodSecurity(prePostEnabled = true)
public class SecurityConfig extends WebSecurityConfigurerAdapter {
@Bean
public PasswordEncoder passwordEncoder(){
return new BCryptPasswordEncoder();
}
@Bean
public UserDetailsService simpleUserDetailsService(){
return new UserDetailsServiceImpl();
}
@Override
protected void configure(AuthenticationManagerBuilder auth) throws Exception {
auth.userDetailsService(simpleUserDetailsService());
}
@Override
@Bean
public AuthenticationManager authenticationManagerBean() throws Exception {
return super.authenticationManagerBean();
}
@Override
protected void configure(HttpSecurity http) throws Exception {
http.userDetailsService(userDetailsService());
http.csrf().disable();
http.formLogin()
.loginPage("/signin").loginProcessingUrl("/signin/form/account").defaultSuccessUrl("/index")
.and()
.logout().logoutUrl("/signout").logoutSuccessUrl("/signin")
.and()
.
authorizeRequests()
.antMatchers("/signin","/signin/form/tel","/code/image","/code/mobile","/static/**").permitAll()
.antMatchers("/oauth/**").permitAll()
.antMatchers("/user/**").hasAnyRole("USER","ADMIN")
.anyRequest().authenticated();
}
}
添加登录表单signin.html
<div class="tab-pane fade in active" id="account-login">
<form th:action="@{/signin/form/account}" method="post">
<label for="username" class="sr-only">⽤户名</label>
<input class="form-control" type="text" name="username" id="username" value="user" placeholder="账号" required>
<label for="password" class="sr-only">密码</label>
<input class="form-control" type="password" name="password" id="password" value="123456" placeholder="密码" required>    <button class="btn btn-lg btn-primary btn-block" type="submit">登录</button>
</form>
</div>
Oauth2 server Config
@Configuration
@EnableAuthorizationServer
public class OAuth2AuthorizationConfig extends AuthorizationServerConfigurerAdapter {
@Autowired
private Environment env;
@Autowired
private AuthenticationManager authenticationManager;
/**
* ⾃定义授权页⾯
*/
@Autowired
private AuthorizationEndpoint authorizationEndpoint;
@PostConstruct
public void init() {
authorizationEndpoint.setUserApprovalPage("forward:/oauth/my_approval_page");
authorizationEndpoint.setErrorPage("forward:/oauth/my_error_page");
}
@Bean
public DataSource dataSource() {
final DriverManagerDataSource dataSource = new DriverManagerDataSource();
dataSource.Property("spring.datasource.driver-class-name"));
dataSource.Property("spring.datasource.url"));
dataSource.Property("spring.datasource.username"));
dataSource.Property("spring.datasource.password"));
return dataSource;
}
@Bean
public ApprovalStore approvalStore() {
return new JdbcApprovalStore(dataSource());
}
@Bean
protected AuthorizationCodeServices authorizationCodeServices() {
return new JdbcAuthorizationCodeServices(dataSource());
}
@Bean
public TokenStore tokenStore() {
return new JdbcTokenStore(dataSource());
}
@Override
public void configure(ClientDetailsServiceConfigurer clients) throws Exception {
// oauth_client_details
clients.jdbc(dataSource());
}
@Override
public void configure(AuthorizationServerEndpointsConfigurer endpoints) {
// oauth_approvals
endpoints.approvalStore(approvalStore());
/
/ oauth_code
endpoints.authorizationCodeServices(authorizationCodeServices());
// oauth_access_token & oauth_refresh_token
// ⽀持password grant type
endpoints.authenticationManager(authenticationManager);
}
@Override
public void configure(AuthorizationServerSecurityConfigurer oauthServer) {
oauthServer.allowFormAuthenticationForClients();
}
}
Oauth2 client 搭建
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-web</artifactId>
</dependency>
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-thymeleaf</artifactId>
</dependency>
<dependency>
<groupId>com.github.scribejava</groupId>
<artifactId>scribejava-apis</artifactId>
<version>5.0.0</version>
</dependency>
DefaultApi20
public class AiwanApi extends DefaultApi20 {
private String accessTokenEndpoint = "localhost:8080/oauth/token";
private String authorizationBaseUrl = "localhost:8080/oauth/authorize";
protected AiwanApi() {}
private static class InstanceHolder {
private static final AiwanApi INSTANCE = new AiwanApi();
}
public static AiwanApi instance() {
return InstanceHolder.INSTANCE;
}
@Override
public String getAccessTokenEndpoint() {
return accessTokenEndpoint;
}
@Override
protected String getAuthorizationBaseUrl() {
return authorizationBaseUrl;
}
@Override
public TokenExtractor<OAuth2AccessToken> getAccessTokenExtractor() {
return OAuth2AccessTokenJsonExtractor.instance();
}
@Override
public OAuth20Service createService(OAuthConfig config) {
return new AiwanService(this, config);
}
}
OAuth20Service
public class AiwanService extends OAuth20Service {
public AiwanService(DefaultApi20 api, OAuthConfig config) {
super(api, config);
}
@Override
protected OAuthRequest createAccessTokenRequest(String code) {
final OAuthRequest request = new OAuthRequest(getApi().getAccessTokenVerb(), getApi().getAccessTokenEndpoint());    final OAuthConfig config = getConfig();
request.addParameter(OAuthConstants.CLIENT_ID, ApiKey());
final String apiSecret = ApiSecret();
if (apiSecret != null) {
request.addParameter(OAuthConstants.CLIENT_SECRET, apiSecret);
}
request.addParameter(OAuthConstants.CODE, code);
request.addParameter(OAuthConstants.REDIRECT_URI, Callback());
final String scope = Scope();
if (scope != null) {
request.addParameter(OAuthConstants.SCOPE, scope);
}
request.addParameter(OAuthConstants.GRANT_TYPE, OAuthConstants.AUTHORIZATION_CODE);
request.addHeader(OAuthConstants.HEADER,
OAuthConstants.BASIC + ' '
+ Instance()
.encode(String.format("%s:%s", ApiKey(), apiSecret).getBytes(Charset.forName("UTF-8"))));
return request;
}
}
获取access_token
@Controller
public class IndexController {
private static Logger logger = Logger(IndexController.class);
private static final String SESSION_KEY_ACCESS_TOKEN = "MY_ACCESS_TOKEN";
/**
* 为防⽌CSRF跨站攻击，每次请求STATE的值应该不同，可以放⼊Session！
* 由于都是localhost测试，所以session⽆法保持，⽤⼀个固定值。
*/
private static final String STATE = "secret-rensanning";
private static final String CLIENT_ID = "client";
private static final String CLIENT_SECRET = "123456";
private static final String CALLBACK_URL = "localhost:8081/mall/callback";
private static final String SCOPE = "ALL";
private OAuth20Service aiwanApi = new ServiceBuilder(CLIENT_ID)
.apiSecret(CLIENT_SECRET)
.scope(SCOPE)
.
state(STATE)
.callback(CALLBACK_URL)
.build(AiwanApi.instance());
@GetMapping("/")
spring framework是什么框架的public String index() {
return "index";
}
@GetMapping("/signin")
public void signin(HttpServletRequest request, HttpServletResponse response) throws IOException {
logger.debug("signin");
logger.info("session id:{}", Session().getId());
String authorizationUrl = AuthorizationUrl();
logger.info("redirectURL:{}", authorizationUrl);
response.sendRedirect(authorizationUrl);
}
@GetMapping("/callback")
public String callback(@RequestParam(value = "code", required = false) String code,
@RequestParam(value = "state", required = false) String state, HttpServletRequest request) throws Exception {    logger.debug("callback [code:{}],[state:{}],[sessionId:{}]", code, state, Session().getId());
if (STATE.equals(state)) {
logger.info("State OK!");
} else {
<("State NG!");
}
OAuth2AccessToken accessToken = AccessToken(code);

版权声明：本站内容均来自互联网，仅供演示用，请勿用于商业和其他非法用途。如果侵犯了您的权益请与我们联系QQ:729038198，我们将在24小时内删除。