OAuth2简易实战（二）-模拟客户端调用

老梁

发布于 2019-09-10 18:30:49

1.1K0

发布于 2019-09-10 18:30:49

文章被收录于专栏：Java工程师成长之路

1. OAuth2简易实战（二）

1.1. 目标

模拟客户端获取第三方授权，并调用第三方接口

1.2. 代码

1.2.1. 核心流程

逻辑就是从数据库读取用户信息，封装成UserDetails对象，该逻辑在用户进行登录时调用，验证由Spring Security框架完成

@Service("clientUserDetailsService")
public class ClientUserDetailsService implements UserDetailsService {

    @Autowired
    private UserRepository users;

    @Override
    public UserDetails loadUserByUsername(String username)
            throws UsernameNotFoundException {
        Optional<ClientUser> optionalUser = users.findByUsername(username);

        if (!optionalUser.isPresent()) {
            throw new UsernameNotFoundException("invalid username or password");
        }

        return new ClientUserDetails(optionalUser.get());
    }

}

验证核心代码

@Configuration
@EnableWebSecurity
public class SecurityConfiguration extends WebSecurityConfigurerAdapter {

    @Autowired
    @Qualifier("clientUserDetailsService")
    private UserDetailsService userDetailsService;

    @Override
    protected void configure(AuthenticationManagerBuilder auth)
            throws Exception {
        auth.userDetailsService(userDetailsService);
    }

    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http
            .authorizeRequests().antMatchers("/", "/index.html").permitAll().anyRequest().authenticated().and()
            .formLogin().and()
            .logout().permitAll().and()
            .csrf().disable();
    }

}