问将google login_hint参数添加到oauth2 AuthorizationCode请求中

EN

// Credit to Joe Grandja for providing test cases found here: 
// https://raw.githubusercontent.com/spring-projects/spring-security/779597af2a6ed777707f08ae8106818e0b8e299e/oauth2/oauth2-client/src/test/java/org/springframework/security/oauth2/client/web/OAuth2AuthorizationRequestRedirectFilterTests.java
// Much of the below code comes from his test examples.
public class ConfigurableOAuth2AuthorizationRequestResolver implements OAuth2AuthorizationRequestResolver
{
    private final OAuth2AuthorizationRequestResolver oAuth2AuthorizationRequestResolver;

    /**
     * Wraps a OAuth2AuthorizationRequestResolver so that calls to the resolve method can be delegated.
     * In our implementation, the value passed here will be a DefaultOAuth2AuthorizationRequestResolver object.
     * @param oAuth2AuthorizationRequestResolver usually the default resolver from Spring.
     */
    public ConfigurableOAuth2AuthorizationRequestResolver(OAuth2AuthorizationRequestResolver oAuth2AuthorizationRequestResolver)
    {
        this.oAuth2AuthorizationRequestResolver = oAuth2AuthorizationRequestResolver;
    }

    /**
     * Adds our custom code to check for extra parameters in the session.  We use the session because there
     * are several redirects to the browser causing any request variable to be lost.  Don't really like
     * storing anything in the HTTP session but OK as long as it is removed immediately after use.
     *
     * @param request needed for resolve method delegation and to retrieve the HTTP session.
     * @return the <code>OAuth2AuthorizationRequest</code>
     */
    @Override
    public OAuth2AuthorizationRequest resolve(HttpServletRequest request)
    {
        OAuth2AuthorizationRequest authorizationRequest = this.oAuth2AuthorizationRequestResolver.resolve(request);
        return processAdditionalParameters(request, authorizationRequest);
    }

    /**
     * Required method for implementation but not used in the standard use case.
     *
     * @param request needed for resolve method delegation and to retrieve the HTTP session.
     * @param clientRegistrationId (e. g. google, okta)
     * @return the <code>OAuth2AuthorizationRequest</code>
     */
    @Override
    public OAuth2AuthorizationRequest resolve(HttpServletRequest request, String clientRegistrationId)
    {
        OAuth2AuthorizationRequest authorizationRequest = this.oAuth2AuthorizationRequestResolver.resolve(request, clientRegistrationId);
        return processAdditionalParameters(request, authorizationRequest);
    }

    /**
     * This method does the important task of appending any special query string parameters to the authorization
     * request.  For now, we are only looking for login_hint in the session.  This method can be changed to
     * support more parameters.  We expect the login_hint key to be found in the session.
     *
     * @param request needed to retrieve the HTTP session.
     * @param authorizationRequest can be null as a valid scenario. Not null when registrationId matches Okta (or whatever).
     * @return the <code>OAuth2AuthorizationRequest</code>
     */
    private OAuth2AuthorizationRequest processAdditionalParameters(HttpServletRequest request, OAuth2AuthorizationRequest authorizationRequest)
    {
        if (authorizationRequest == null)
        {
            return null;
        }
        // NOTE: this can be improved to support multiple parameters by storing a list instead of a single param
        Map<String, Object> additionalParameters = new HashMap<>(authorizationRequest.getAdditionalParameters());
        HttpSession session = request.getSession();
        additionalParameters.put(SSO_OAUTH2_AUTH_PARAM_LOGIN_HINT, session.getAttribute(SSO_OAUTH2_AUTH_PARAM_LOGIN_HINT));
        session.removeAttribute(SSO_OAUTH2_AUTH_PARAM_LOGIN_HINT); // remove immediately after use
        String customAuthorizationRequestUri = UriComponentsBuilder
            .fromUriString(authorizationRequest.getAuthorizationRequestUri())
            .queryParam(SSO_OAUTH2_AUTH_PARAM_LOGIN_HINT, additionalParameters.get(SSO_OAUTH2_AUTH_PARAM_LOGIN_HINT))
            .build(true).toUriString();
        return OAuth2AuthorizationRequest.from(authorizationRequest)
            .additionalParameters(additionalParameters)
            .authorizationRequestUri(customAuthorizationRequestUri)
            .build();
    }
}

@Override
protected void configure(HttpSecurity http) throws Exception
{
    logger.info("Configuring OAuth/OIDC HTTP security ...");
    http
        .oauth2Login()
        .authorizationEndpoint()
            .authorizationRequestResolver(this.authorizationRequestResolver()) // adds custom resolver

}

@Bean
public OAuth2AuthorizationRequestResolver authorizationRequestResolver()
{
    OAuth2AuthorizationRequestResolver defaultAuthorizationRequestResolver = new DefaultOAuth2AuthorizationRequestResolver(
        yourClientRegistrationRepository, OAuth2AuthorizationRequestRedirectFilter.DEFAULT_AUTHORIZATION_REQUEST_BASE_URI);
    return new ConfigurableOAuth2AuthorizationRequestResolver(defaultAuthorizationRequestResolver);
}