OAuth2 数据存到数据库

矫情吗；* 2024-04-18 18:21 26阅读 0赞

学习地址:

https://www.majiaxu:eyuan.com/uc/play/65

Oauth2.0的一些简单介绍：

https://blog.csdn.net/qq\_28198181/article/details/100523474

# 1.数据库创建表 #

[官方推荐SQL][SQL]路径

可以用这个我下好的:

[https://download.csdn.net/download/qq\_28198181/11710767][https_download.csdn.net_download_qq_28198181_11710767](里面有两个，如果遇到导入sql报错Error : Index column size too large. The maximum column size is 767 bytes，需要修改索引长度限制，可以看看问题处理方式[https://blog.csdn.net/qq\_28198181/article/details/100657009][https_blog.csdn.net_qq_28198181_article_details_100657009])

![20190910161800314.png][]

# 2.修改认证中心的代码 #

将以前存入缓存的数据改为存在数据库

1.maven配置配置需要添加关于连接数据库的

<dependency>
    		<groupId>org.springframework.boot</groupId>
    		<artifactId>spring-boot-starter-jdbc</artifactId>
            </dependency>
    
            <dependency>
    		<groupId>mysql</groupId>
    		<artifactId>mysql-connector-java</artifactId>
            </dependency>

完整如下：

<parent>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-starter-parent</artifactId>
            <version>2.0.6.RELEASE</version>
        </parent>
        
        <dependencyManagement>
            <dependencies>
                <dependency>
                    <groupId>org.springframework.cloud</groupId>
                    <artifactId>spring-cloud-dependencies</artifactId>
                    <version>Finchley.M7</version>
                    <type>pom</type>
                    <scope>import</scope>
                </dependency>
            </dependencies>
        </dependencyManagement>
        <dependencies>
            
            <dependency>
                <groupId>org.springframework.boot</groupId>
                <artifactId>spring-boot-starter-web</artifactId>
            </dependency>
            <dependency>
                <groupId>org.projectlombok</groupId>
                <artifactId>lombok</artifactId>
            </dependency>
    
            
            <dependency>
                <groupId>org.springframework.boot</groupId>
                <artifactId>spring-boot-starter-freemarker</artifactId>
            </dependency>
            
            <dependency>
                <groupId>org.springframework.boot</groupId>
                <artifactId>spring-boot-starter-security</artifactId>
            </dependency>
            
            <dependency>
                <groupId>org.springframework.cloud</groupId>
                <artifactId>spring-cloud-starter-oauth2</artifactId>
            </dependency>
            <dependency>
                <groupId>com.alibaba</groupId>
                <artifactId>fastjson</artifactId>
                <version>1.2.47</version>
            </dependency>
    
            <dependency>
                <groupId>org.springframework.boot</groupId>
                <artifactId>spring-boot-starter-jdbc</artifactId>
            </dependency>
    
            <dependency>
                <groupId>mysql</groupId>
                <artifactId>mysql-connector-java</artifactId>
            </dependency>
    
        </dependencies>
        
        <repositories>
            <repository>
                <id>spring-milestones</id>
                <name>Spring Milestones</name>
                <url>https://repo.spring.io/libs-milestone</url>
                <snapshots>
                    <enabled>false</enabled>
                </snapshots>
            </repository>
        </repositories>

2.application.properties添加jdbc参数，连接的数据库的配置

#2.0默认的数据库连接池从 tomcatjdbcpool 改为了 hikari
    spring.datasource.hikari.connection-test-query=SELECT 1
    spring.datasource.hikari.minimum-idle=1
    spring.datasource.hikari.maximum-pool-size=5
    spring.datasource.hikari.pool-name=dbcp1
    spring.datasource.driver-class-name=com.mysql.jdbc.Driver
    spring.datasource.url=jdbc:mysql://127.0.0.1:3306/oauth?autoReconnect=true&useSSL=false
    spring.datasource.username=username
    spring.datasource.password=password

3.配置认证授权中心的jdbc部分

1.添加datasource的实体

@Autowired
    @Qualifier("dataSource")
    private DataSource dataSource;

2.设置token的存取

@Bean
        public TokenStore tokenStore() {
            // return new InMemoryTokenStore(); //使用内存中的 token store
            return new JdbcTokenStore(dataSource); /// 使用Jdbctoken store
        }

3.configure配置从内存中存取改为数据库

//添加商户信息
        @Override
        public void configure(ClientDetailsServiceConfigurer clients) throws Exception {
    
            //withClient Appid 这个是存储到内存
    //        clients.inMemory().withClient("yyy_client").secret(passwordEncoder().encode("yyy_secret")) //设置用户 和密码
    //                .authorizedGrantTypes("password","authorization_code","client_credentials","refresh_token").scopes("all") //设置权限类型,用密码，客户端模式,刷新的token  权限为所有人
    //                .accessTokenValiditySeconds(accessTokenValiditySecond)
    //                .refreshTokenValiditySeconds(refreshTokenValiditySecond);
            //存储到数据库
            clients.jdbc(dataSource);
    
        }

endpointConfigurer添加令牌存储

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzI4MTk4MTgx_size_16_color_FFFFFF_t_70][]

// 设置令牌存储在数据库
      endpointsConfigurer.tokenStore(tokenStore());

修改用户细节，：

// 设置添加用户信息,正常应该从数据库中读取
    	@Bean
    	UserDetailsService userDetailsService() {
    		return new UserDetailsService() {
    			@Override
    			public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException {
    				// 通过username在数据库拿到用户
    				if (false) {
    					throw new UsernameNotFoundException("用户[" + username + "]不存在");
    				}
    				// 判断是否禁用
    				// 验证授权,密码123456 这里是进行了加密的 写死了
    				User user = new User(username, "$2a$10$tNV7vTVN383xhavrVbjV9OArnc0liAdilz4gLrpySreRK8DfHoiWa",
    						AuthorityUtils.createAuthorityList("ROLE_USER"));
    				return user;
    			}
    		};
    	}

全代码如下：

@Configuration
    @EnableAuthorizationServer
    public class AuthorizationServerConfig extends AuthorizationServerConfigurerAdapter {
    
        //accessToken 过期
        private int accessTokenValiditySecond = 60 * 60 * 2; //2小时
        private int refreshTokenValiditySecond = 60 * 60 * 24 * 7; // 7 天
    
    
        @Autowired
        @Qualifier("dataSource")
        private DataSource dataSource;
    
        @Bean
        public TokenStore tokenStore() {
            // return new InMemoryTokenStore(); //使用内存中的 token store
            return new JdbcTokenStore(dataSource); /// 使用Jdbctoken store
        }
    
    
        //添加商户信息
        @Override
        public void configure(ClientDetailsServiceConfigurer clients) throws Exception {
    
            //withClient Appid 这个是存储到内存
    //        clients.inMemory().withClient("yyy_client").secret(passwordEncoder().encode("yyy_secret")) //设置用户 和密码
    //                .authorizedGrantTypes("password","authorization_code","client_credentials","refresh_token").scopes("all") //设置权限类型,用密码，客户端模式,刷新的token  权限为所有人
    //                .accessTokenValiditySeconds(accessTokenValiditySecond)
    //                .refreshTokenValiditySeconds(refreshTokenValiditySecond);
            //存储到数据库
            clients.jdbc(dataSource);
    
        }
    
        //定义授权和令牌端点和令牌服务
        public void configure(AuthorizationServerEndpointsConfigurer endpointsConfigurer) {
    
            //刷新令牌时需要的认证管理和用户信息来源
            endpointsConfigurer.authenticationManager(authenticationManager()).allowedTokenEndpointRequestMethods(HttpMethod.GET, HttpMethod.POST);
            endpointsConfigurer.authenticationManager(authenticationManager());
            endpointsConfigurer.userDetailsService(userDetailsService());
            endpointsConfigurer.accessTokenConverter(accessTokenJwtConverter());
            // 设置令牌存储在数据库
            endpointsConfigurer.tokenStore(tokenStore());
        }
    
        @Override
        public void configure(AuthorizationServerSecurityConfigurer oauthServer) throws Exception {
    
            //允许表单认证
            oauthServer.allowFormAuthenticationForClients();
            //允许 check_token 访问
            oauthServer.checkTokenAccess("permitAll()");
        }
    
        @Bean
        AuthenticationManager authenticationManager() {
            AuthenticationManager authenticationManager = new AuthenticationManager() {
                public Authentication authenticate(Authentication authentication) throws AuthenticationException {
                    return daoAuhthenticationProvider().authenticate(authentication);
                }
            };
            return authenticationManager;
        }
    
        @Bean
        public AuthenticationProvider daoAuhthenticationProvider() {
            DaoAuthenticationProvider daoAuthenticationProvider = new DaoAuthenticationProvider();
            daoAuthenticationProvider.setUserDetailsService(userDetailsService());
            daoAuthenticationProvider.setHideUserNotFoundExceptions(false);
            daoAuthenticationProvider.setPasswordEncoder(passwordEncoder());
            return daoAuthenticationProvider;
        }
    
        // 设置添加用户信息,正常应该从数据库中读取
        @Bean
        UserDetailsService userDetailsService() {
            return new UserDetailsService() {
                @Override
                public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException {
                    // 通过username在数据库拿到用户
                    if (false) {
                        throw new UsernameNotFoundException("用户[" + username + "]不存在");
                    }
                    // 判断是否禁用
                    // 验证授权,密码123456
                    User user = new User(username, "$2a$10$tNV7vTVN383xhavrVbjV9OArnc0liAdilz4gLrpySreRK8DfHoiWa",
                            AuthorityUtils.createAuthorityList("ROLE_USER"));
                    return user;
                }
            };
        }
    
    
        @Bean
        PasswordEncoder passwordEncoder() {
            // 加密方式
            PasswordEncoder passwordEncoder = new BCryptPasswordEncoder();
            return passwordEncoder;
        }
    
    
        // JWT
        @Bean
        public JwtAccessTokenConverter accessTokenJwtConverter() {
            JwtAccessTokenConverter accessTokenConverter = new JwtAccessTokenConverter() {
                @Override
                public OAuth2AccessToken enhance(OAuth2AccessToken accessToken, OAuth2Authentication authentication) {
                    // 这里的UserName是OpenId
                    String username = authentication.getUserAuthentication().getName();
                    // 得到用户名，去处理数据库可以拿到当前用户的信息和角色信息（需要传递到服务中用到的信息）
                    final Map<String, Object> addToJWTInformation = new HashMap<>();
                    JSONObject json = new JSONObject();
                    json.put("userId", 1);
                    json.put("userName", username);
                    addToJWTInformation.put("localUser", json.toJSONString());
                    ((DefaultOAuth2AccessToken) accessToken).setAdditionalInformation(addToJWTInformation);
                    OAuth2AccessToken enhancedToken = super.enhance(accessToken, authentication);
                    return enhancedToken;
                }
            };
            accessTokenConverter.setSigningKey("yyy-sign-key");// 测试用,资源服务使用相同的字符达到一个对称加密的效果
            return accessTokenConverter;
        }

我在数据库中先添加一个用户认证好的信息

![20190910165322659.png][]

![20190910165403646.png][]

![20190910165416189.png][]

# 3. 启动并访问路径 #

通过网页认证访，回调路径到4399

localhost:8080/oauth/authorize?response_type=code&client_id=yyy_client&redirect_uri=http://www.4399.com

![20190910170840988.png][]

通过postman访问回去得到token。

![20190910171608623.png][]

如上

[SQL]: https://github.com/spring-projects/spring-security-oauth/blob/master/spring-security-oauth2/src/test/resources/schema.sql
[https_download.csdn.net_download_qq_28198181_11710767]: https://download.csdn.net/download/qq_28198181/11710767
[https_blog.csdn.net_qq_28198181_article_details_100657009]: https://blog.csdn.net/qq_28198181/article/details/100657009
[20190910161800314.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/18/76d628ef9d83401c865e60003b7058f1.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzI4MTk4MTgx_size_16_color_FFFFFF_t_70]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/18/628572e787584918979786f34bf258ae.png
[20190910165322659.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/18/3888e46379ad4c79bb65830953e6c8f8.png
[20190910165403646.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/18/eb5d25a28bd44314b8ca6b92553b89bd.png
[20190910165416189.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/18/e62271608a9f432392c5adfbaa4da0c9.png
[20190910170840988.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/18/3e500bf045f04b839101bf833ec30c0b.png
[20190910171608623.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/18/36efc5e219904277991be3eef74dfc32.png