Spring Security OAuth2的client模式访问受限资源

我会带着你远行 2021-07-24 23:28 521阅读 0赞

**一 代码位置**

[https://github.com/cakin24/oauth2-demo/tree/master/client-credentials][https_github.com_cakin24_oauth2-demo_tree_master_client-credentials]

**二 参考文章**

[http://www.spring4all.com/article/450][http_www.spring4all.com_article_450]

**三 访问资源过程**

1 获取token

http://localhost:8080/oauth/token?client_id=client_1&client_secret=123456&scope=select&grant_type=client_credentials

2 浏览器显示结果

{"access_token":"ef31bd85-fd5d-48d8-9013-9b952ba2d65b","token_type":"bearer","expires_in":34425,"scope":"select"}

3 访问受限资源

http://localhost:8080/order/1?access_token=ef31bd85-fd5d-48d8-9013-9b952ba2d65b

**四 关键类**

*  OAuth2AuthenticationProcessingFilter：核心过滤器。
 *  OAuth2AuthenticationManager：OAuth2的身份管理器
 *  DefaultTokenServices
 *  InMemoryClientDetailsService

**五 关键类图**

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2NoZW5ncWl1bWluZw_size_16_color_FFFFFF_t_70][]

**六 调试关键点**

1 OAuth2AuthenticationProcessingFilter关键断点

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2NoZW5ncWl1bWluZw_size_16_color_FFFFFF_t_70 1][]

2 OAuth2AuthenticationManager关键断点

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2NoZW5ncWl1bWluZw_size_16_color_FFFFFF_t_70 2][]

3 DefaultTokenServices关键断点

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2NoZW5ncWl1bWluZw_size_16_color_FFFFFF_t_70 3][]

4 InMemoryClientDetailsService关键断点

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2NoZW5ncWl1bWluZw_size_16_color_FFFFFF_t_70 4][]

5 访问资源时，会用携带的token到内存中去寻找，如果没找到，会失败。失败点如下代码所示：

![2019120120231952.png][]

页面显示

<oauth>
      <error_description>
        Invalid access token: ef31bd85-fd5d-48d8-9013-9b952ba2d651
      </error_description>
      <error>invalid_token</error>
    </oauth>

[https_github.com_cakin24_oauth2-demo_tree_master_client-credentials]: https://github.com/cakin24/oauth2-demo/tree/master/client-credentials
[http_www.spring4all.com_article_450]: http://www.spring4all.com/article/450
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2NoZW5ncWl1bWluZw_size_16_color_FFFFFF_t_70]: /images/20210724/58a221d1de3349f5836b4fe37b72951a.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2NoZW5ncWl1bWluZw_size_16_color_FFFFFF_t_70 1]: /images/20210724/7058483bf6ec44d9968a34a6df35f729.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2NoZW5ncWl1bWluZw_size_16_color_FFFFFF_t_70 2]: /images/20210724/5de2a392574640d6bee98a74450a7e0c.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2NoZW5ncWl1bWluZw_size_16_color_FFFFFF_t_70 3]: /images/20210724/5f6cdb12baef46eaabfd1a0758702999.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2NoZW5ncWl1bWluZw_size_16_color_FFFFFF_t_70 4]: /images/20210724/f88c59aa7e8b41f094e8c0da9c5b64d2.png
[2019120120231952.png]: /images/20210724/d3cdbe6349cd4fa395464d33abe4e6f6.png