Spring Boot OAuth2安全会话在注销时无法清除
Spring Boot OAuth2安全会话在注销时无法清除
提问于 2018-10-01 14:36:09
我使用了以下配置，但用户仍然存在。它还没有清除cookies.So，如何清除会话和cookie？
.and()
.logout().logoutRequestMatcher(new AntPathRequestMatcher("/logout"))
.logoutSuccessUrl("/").deleteCookies("JSESSIONID")
.invalidateHttpSession(true) ;在那之后，我使用了下面的代码，然后得到错误"redirect_uri_mismatch“
@RequestMapping(value = "/logout", method = RequestMethod.POST)
public String logout(HttpServletRequest request,
HttpServletResponse response) {
HttpSession session = request.getSession(false);
if (request.isRequestedSessionIdValid() && session != null) {
session.invalidate();
}
for (Cookie cookie : request.getCookies()) {
cookie.setMaxAge(0);
cookie.setValue(null);
cookie.setPath("/");
response.addCookie(cookie);
}
return ("/new");
}然后我使用了下面的代码，它再次得到错误"redirect_uri_mismatch“
@RequestMapping(value="/logout", method = RequestMethod.GET)
public String logoutPage (HttpServletRequest request, HttpServletResponse response) {
Authentication auth = SecurityContextHolder.getContext().getAuthentication();
if (auth != null){
new SecurityContextLogoutHandler().logout(request, response, auth);
}
return "redirect:/new";
}我分别使用了上面的代码，但什么也没有发生
回答 1
Stack Overflow用户
发布于 2018-10-03 19:26:29
默认登录名是.formlogin()，所以我使用了.oauth2Login()，然后它就起作用了。
.and()
.oauth2Login()
.logout().logoutRequestMatcher(new AntPathRequestMatcher("/logout"))
.logoutSuccessUrl("/").deleteCookies("JSESSIONID")
.invalidateHttpSession(true) ;我还使用了defualt spring oauth配置
@GetMapping("/secured")
public String securedPage(Model model, OAuth2AuthenticationToken authentication) {
OAuth2AuthorizedClient client = authorizedClientService.loadAuthorizedClient(authentication.getAuthorizedClientRegistrationId(), authentication.getName());
String userInfoEndpointUri = client.getClientRegistration()
.getProviderDetails()
.getUserInfoEndpoint()
.getUri();
if (!StringUtils.isEmpty(userInfoEndpointUri)) {
RestTemplate restTemplate = new RestTemplate();
HttpHeaders headers = new HttpHeaders();
headers.add(HttpHeaders.AUTHORIZATION, "Bearer " + client.getAccessToken().getTokenValue());
HttpEntity<String> entity = new HttpEntity<String>("", headers);
ResponseEntity<Map> response = restTemplate.exchange(userInfoEndpointUri, HttpMethod.GET, entity, Map.class);
Map userAttributes = response.getBody();
model.addAttribute("name", userAttributes.get("name"));
}
return "/secured";页面原文内容由Stack Overflow提供。腾讯云小微IT领域专用引擎提供翻译支持
原文链接：
https://stackoverflow.com/questions/52585709
复制相关文章
相似问题
腾讯云开发者
