在现有sprig引导应用程序中实现oauth2

<dependency>
    <groupId>org.springframework.boot</groupId>
    <artifactId>spring-boot-starter-security</artifactId>
</dependency>

<dependency>
    <groupId>org.springframework.boot</groupId>
    <artifactId>spring-boot-starter-oauth2-client</artifactId>
</dependency>

spring.security.oauth2.client.registration.my-client-id.client-id=your-client-id
spring.security.oauth2.client.registration.my-client-id.client-secret=your-client-secret
spring.security.oauth2.client.registration.my-client-id.provider=your-authorization-server-url
spring.security.oauth2.client.registration.my-client-id.redirect-uri=your-redirect-uri

@Configuration
@EnableWebSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter {

    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http.authorizeRequests()
            .antMatchers("/public/**").permitAll()
            .anyRequest().authenticated()
            .and()
            .oauth2Login();
    }
}

@Component
public class CustomOAuth2AuthorizedClientRepository implements OAuth2AuthorizedClientRepository {

    @Override
    public <T extends OAuth2AuthorizedClient> T loadAuthorizedClient(String clientRegistrationId, String principalName) {
        // 实现加载已授权的客户端逻辑
    }

    @Override
    public void saveAuthorizedClient(OAuth2AuthorizedClient authorizedClient, Authentication principal) {
        // 实现保存已授权的客户端逻辑
    }

    @Override
    public void removeAuthorizedClient(String clientRegistrationId, String principalName) {
        // 实现移除已授权的客户端逻辑
    }
}

@RestController
public class MyController {

    @GetMapping("/protected-resource")
    public String protectedResource() {
        return "This is a protected resource";
    }
}