SpringSecurityOauth--用户名和密码登陆(令牌)

梦里梦外; 2024-02-19 17:31 114阅读 0赞

SpringSecurityOauth：**认证服务器和资源服务器**。

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzU0OTU3OA_size_16_color_FFFFFF_t_70][]

只要登陆成功后系统都会返回一个accessToken,因而在用户名和密码登陆的过程中，认证成功需要返回一个令牌，接下来每一次请i去都需要带着这个令牌进行业务处理。

登陆成功后，我们会进入一个成功处理器中，这个时候就把令牌返回回来就行。

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzU0OTU3OA_size_16_color_FFFFFF_t_70 1][]

（来源网络）

@Component("springAuthenticationSuccessHandler")
    public class SpringAuthenticationSuccessHandler extends SavedRequestAwareAuthenticationSuccessHandler {
    
    	private Logger logger = LoggerFactory.getLogger(getClass());
    
    	@Autowired
    	private ObjectMapper objectMapper;
    
    	@Autowired
    	private ClientDetailsService clientDetailsService;
    
    	@Autowired
    	private AuthorizationServerTokenServices authorizationServerTokenServices;
    
    	/*
    	 * (non-Javadoc)
    	 *
    	 * @see org.springframework.security.web.authentication.
    	 * AuthenticationSuccessHandler#onAuthenticationSuccess(javax.servlet.http.
    	 * HttpServletRequest, javax.servlet.http.HttpServletResponse,
    	 * org.springframework.security.core.Authentication)
    	 */
    	@SuppressWarnings("unchecked")
    	@Override
    	public void onAuthenticationSuccess(HttpServletRequest request, HttpServletResponse response,
    			Authentication authentication) throws IOException, ServletException {
    
    		logger.info("登录成功");
    
    		String header = request.getHeader("Authorization");
    
    		if (header == null || !header.startsWith("Basic ")) {
    			throw new UnapprovedClientAuthenticationException("请求头中无client信息");
    		}
    
    		String[] tokens = extractAndDecodeHeader(header, request);
    		assert tokens.length == 2;
    
    		String clientId = tokens[0];
    		String clientSecret = tokens[1];
    
    		ClientDetails clientDetails = clientDetailsService.loadClientByClientId(clientId);
    
    		if (clientDetails == null) {
    			throw new UnapprovedClientAuthenticationException("clientId对应的配置信息不存在:" + clientId);
    		} else if (!StringUtils.equals(clientDetails.getClientSecret(), clientSecret)) {
    			throw new UnapprovedClientAuthenticationException("clientSecret不匹配:" + clientId);
    		}
    
    		TokenRequest tokenRequest = new TokenRequest(MapUtils.EMPTY_MAP, clientId, clientDetails.getScope(), "custom");
    
    		OAuth2Request oAuth2Request = tokenRequest.createOAuth2Request(clientDetails);
    
    		OAuth2Authentication oAuth2Authentication = new OAuth2Authentication(oAuth2Request, authentication);
    
    		OAuth2AccessToken token = authorizationServerTokenServices.createAccessToken(oAuth2Authentication);
    
    		response.setContentType("application/json;charset=UTF-8");
    		response.getWriter().write(objectMapper.writeValueAsString(token));
    
    	}
    
    	private String[] extractAndDecodeHeader(String header, HttpServletRequest request) throws IOException {
    
    		byte[] base64Token = header.substring(6).getBytes("UTF-8");
    		byte[] decoded;
    		try {
    			decoded = Base64.decode(base64Token);
    		} catch (IllegalArgumentException e) {
    			throw new BadCredentialsException("Failed to decode basic authentication token");
    		}
    
    		String token = new String(decoded, "UTF-8");
    
    		int delim = token.indexOf(":");
    
    		if (delim == -1) {
    			throw new BadCredentialsException("Invalid basic authentication token");
    		}
    		return new String[] { token.substring(0, delim), token.substring(delim + 1) };
    	}
    
    }

测试：

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzU0OTU3OA_size_16_color_FFFFFF_t_70 2][]

在APP等场景里面是没有session的这时候需要第三方缓存 redis等存储信息。

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzU0OTU3OA_size_16_color_FFFFFF_t_70 3][]

获取用户信息：

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzU0OTU3OA_size_16_color_FFFFFF_t_70 4][]

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzU0OTU3OA_size_16_color_FFFFFF_t_70]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/29/ba8bdec27bb440ccaaef5c40040c9d6e.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzU0OTU3OA_size_16_color_FFFFFF_t_70 1]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/29/7a5c20d299ac41939b978c5db5c4d79f.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzU0OTU3OA_size_16_color_FFFFFF_t_70 2]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/29/2d23012a28484c1cb62ed9a269bc9a5b.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzU0OTU3OA_size_16_color_FFFFFF_t_70 3]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/29/26f1802020f04ceabef66902437df7cf.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzU0OTU3OA_size_16_color_FFFFFF_t_70 4]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/29/2edfc8d1c08843e3b05739902f552f23.png