org.springframework.security.oauth2.config.annotation.web.configurers.AuthorizationServerEndpointsConfigurer#accessTokenConverter

Source File: AuthSvrApplication.java From Spring5Tutorial with GNU Lesser General Public License v3.0

7 votes

@Bean
public AuthorizationServerConfigurer authorizationServerConfigurer(
		@Value("${client.web.name}") String clientName, 
   		@Value("${client.web.secret}") String clientSecret) {
	return new AuthorizationServerConfigurerAdapter() {

		@Override
		public void configure(ClientDetailsServiceConfigurer clients) throws Exception {
			clients.inMemory()
			       .withClient(clientName)
			       .secret(passwordEncoder.encode(clientSecret))
			       .scopes("account", "message", "email")
			       .authorizedGrantTypes("client_credentials");
		}
		
		@Override
		public void configure(AuthorizationServerSecurityConfigurer oauthServer) throws Exception {
		    oauthServer.checkTokenAccess("isAuthenticated()");    
		}

		@Override
		public void configure(AuthorizationServerEndpointsConfigurer endpoints) throws Exception {
			endpoints.accessTokenConverter(accessTokenConverter());
		}
	};
}

Source File: AuthorizationServerConfig.java From cloud-service with MIT License

6 votes

@Override
    public void configure(AuthorizationServerEndpointsConfigurer endpoints) throws Exception {
        endpoints.authenticationManager(this.authenticationManager);
        endpoints.tokenStore(tokenStore());
        // 授权码模式下，code存储
//		endpoints.authorizationCodeServices(new JdbcAuthorizationCodeServices(dataSource));
        endpoints.authorizationCodeServices(redisAuthorizationCodeServices);
        if (storeWithJwt) {
            endpoints.accessTokenConverter(accessTokenConverter());
        } else {
            // 2019.07.13 将当前用户信息追加到登陆后返回数据里
            endpoints.tokenEnhancer((accessToken, authentication) -> {
                addLoginUserInfo(accessToken, authentication);
                return accessToken;
            });
        }
    }

Source File: AuthorizationServerConfig.java From microservices-platform with Apache License 2.0

6 votes

/**
 * 配置身份认证器，配置认证方式，TokenStore，TokenGranter，OAuth2RequestFactory
 * @param endpoints
 */
@Override
public void configure(AuthorizationServerEndpointsConfigurer endpoints) {
    if (jwtAccessTokenConverter != null) {
        if (tokenEnhancer != null) {
            TokenEnhancerChain tokenEnhancerChain = new TokenEnhancerChain();
            tokenEnhancerChain.setTokenEnhancers(
                    Arrays.asList(tokenEnhancer, jwtAccessTokenConverter));
            endpoints.tokenEnhancer(tokenEnhancerChain);
        } else {
            endpoints.accessTokenConverter(jwtAccessTokenConverter);
        }
    }
    endpoints.tokenStore(tokenStore)
            .authenticationManager(authenticationManager)
            .userDetailsService(userDetailsService)
            .authorizationCodeServices(authorizationCodeServices)
            .exceptionTranslator(webResponseExceptionTranslator);
}

Source File: OAuth2ServerConfig.java From open-capacity-platform with Apache License 2.0

5 votes

/**
 * 配置身份认证器，配置认证方式，TokenStore，TokenGranter，OAuth2RequestFactory
 */
public void configure(AuthorizationServerEndpointsConfigurer endpoints) throws Exception {

    if (jwtTokenStore != null) {
        endpoints.tokenStore(jwtTokenStore).authenticationManager(authenticationManager)
                // 支持
                .userDetailsService(userDetailsService);
        // password
        // grant
        // type;
    } else if (redisTokenStore != null) {
        endpoints.tokenStore(redisTokenStore).authenticationManager(authenticationManager)
                // 支持
                .userDetailsService(userDetailsService);
        // password
        // grant
        // type;
    }

    if (jwtAccessTokenConverter != null) {
        endpoints.accessTokenConverter(jwtAccessTokenConverter);
    }

    endpoints.authorizationCodeServices(authorizationCodeServices);

    endpoints.exceptionTranslator(webResponseExceptionTranslator);

}

Source File: OAuth2AuthorizationServerConfiguration.java From spring-security-oauth2-boot with Apache License 2.0

5 votes

@Override
public void configure(AuthorizationServerEndpointsConfigurer endpoints) throws Exception {
	if (this.tokenConverter != null) {
		endpoints.accessTokenConverter(this.tokenConverter);
	}
	if (this.tokenStore != null) {
		endpoints.tokenStore(this.tokenStore);
	}
	if (this.details.getAuthorizedGrantTypes().contains("password")) {
		endpoints.authenticationManager(this.authenticationManager);
	}
}

Source File: AuthorizationServerConfig.java From platform with Apache License 2.0

5 votes

@Override
public void configure(AuthorizationServerEndpointsConfigurer endpoints) {
    endpoints.authenticationManager(this.authenticationManager);
    endpoints.tokenStore(tokenStore());
    endpoints.accessTokenConverter(accessTokenConverter());
    // 默认情况下，只有第一次请求到的Refresh Token可用，
    // 后续刷新后获取到的Refresh Token都无法使用的
    // 这里可以根据实际情况做选择
    endpoints.reuseRefreshTokens(false);
}