在我的java服务器应用程序中,当尝试使用密码授予流进行身份验证时,我得到了以下错误:
TokenEndpoint - Handling error: InvalidClientException, Unauthorized grant type: password
我确实为有问题的用户显式地允许授权:
@Override
public void configure(ClientDetailsServiceConfigurer clients) throws Exception {
clients.inMemory()
.withClient("officialclient")
.authorizedGrantTypes("authorization_code, refresh_token, password")
.authorities("ROLE_CLIENT")
.scopes("read", "write")
.resourceIds(RESOURCE_ID)
.secret("officialclientsecret")
.redirectUris("https://www.someurl.com/")
}
我使用以下代码来检索访问令牌:
ResourceOwnerPasswordResourceDetails resourceDetails = new ResourceOwnerPasswordResourceDetails();
resourceDetails.setClientAuthenticationScheme(AuthenticationScheme.header);
resourceDetails.setAccessTokenUri("http://localhost:8080/organizer/oauth/token");
resourceDetails.setScope(Arrays.asList("read", "write"));
resourceDetails.setId("resource");
resourceDetails.setClientId("officialclient");
resourceDetails.setClientSecret("officialclientsecret");
resourceDetails.setUsername("Paul");
resourceDetails.setPassword("password");
OAuth2RestTemplate template = new OAuth2RestTemplate(resourceDetails, context);
return template.getAccessToken().getValue();
是否有允许密码授予类型的全局设置?
https://stackoverflow.com/questions/35829801
复制相似问题