spring security webflux gitee 授权登录

迈不过友情╰ 2023-02-17 05:19 38阅读 0赞

--------------------

### spring security webflux gitee 授权登录 ###

### \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\* ###

**示例**

**\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\***

**配置文件**

**application.yml**

spring:
      security:
        oauth2:
          client:
            registration:
              gitee:
                provider: gitee
                client-id: ******
                client-secret: ******
                authorization-grant-type: authorization_code
                redirect-uri: "{baseUrl}/login/oauth2/code/gitee"
                client-name: gitee
                scope: user_info
            provider:
              gitee:
                authorization-uri: https://gitee.com/oauth/authorize
                token-uri: https://gitee.com/oauth/token
                user-info-uri: https://gitee.com/api/v5/user

**\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\***

**config 层**

**GiteeReactiveOAuth2AccessTokenResponseClient：使用授权码获得access\_token**

@Component
    public class GiteeReactiveOAuth2AccessTokenResponseClient implements ReactiveOAuth2AccessTokenResponseClient<OAuth2AuthorizationCodeGrantRequest> {
    
        @Override
        public Mono<OAuth2AccessTokenResponse> getTokenResponse(OAuth2AuthorizationCodeGrantRequest oAuth2AuthorizationCodeGrantRequest) {
            ClientRegistration clientRegistration=oAuth2AuthorizationCodeGrantRequest.getClientRegistration();
    
            return Mono.defer(() -> WebClient.create().post().uri(clientRegistration.getProviderDetails().getTokenUri(),new Object[0])
                    .headers(headers -> headers.add("User-Agent","Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"))
                    .body(createRequestBody(oAuth2AuthorizationCodeGrantRequest))
                    .exchange().flatMap(response -> response.body(OAuth2BodyExtractors.oauth2AccessTokenResponse()))
            );
        }
    
        private BodyInserters.FormInserter<String> createRequestBody(OAuth2AuthorizationCodeGrantRequest oAuth2AuthorizationCodeGrantRequest){
            ClientRegistration clientRegistration=oAuth2AuthorizationCodeGrantRequest.getClientRegistration();
    
            return BodyInserters.fromFormData("grant_type","authorization_code")
                    .with("client_id",clientRegistration.getClientId())
                    .with("client_secret",clientRegistration.getClientSecret())
                    .with("redirect_uri",oAuth2AuthorizationCodeGrantRequest.getAuthorizationExchange().getAuthorizationRequest().getRedirectUri())
                    .with("code", oAuth2AuthorizationCodeGrantRequest.getAuthorizationExchange().getAuthorizationResponse().getCode());
        }
    }

**GiteeReactiveOauth2UserService：获取认证用户信息**

@Service
    public class GiteeReactiveOAuth2UserService implements ReactiveOAuth2UserService<OAuth2UserRequest, OAuth2User> {
    
        @Override
        public Mono<OAuth2User> loadUser(OAuth2UserRequest oAuth2UserRequest) throws OAuth2AuthenticationException {
            ParameterizedTypeReference<Map<String,Object>> parameterizedTypeReference= new ParameterizedTypeReference<Map<String,Object>>() {};
    
            Mono<Map<String, Object>> userAttributes = WebClient.create().get().uri(oAuth2UserRequest.getClientRegistration().getProviderDetails().getUserInfoEndpoint().getUri(),new Object[0])
                    .headers(headers ->{
                        headers.add("User-Agent","Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36");
                        headers.setBearerAuth(oAuth2UserRequest.getAccessToken().getTokenValue());
                    }).retrieve().bodyToMono(parameterizedTypeReference);
    
            return userAttributes.map(attrs ->{
                Set<GrantedAuthority> authorities=new HashSet<>();
                authorities.add(new SimpleGrantedAuthority("ROLE_USER"));
    
                return new DefaultOAuth2User(authorities,attrs,"name");
            });
        }
    }

**WebSecurityConfig：安全配置**

@Configuration
    public class WebSecurityConfig {
    
        @Resource
        private GiteeReactiveOAuth2AccessTokenResponseClient oAuth2AccessTokenResponseClient;
    
        @Resource
        private GiteeReactiveOAuth2UserService oAuth2UserService;
    
        @Bean
        public SecurityWebFilterChain initSecurityWebFilterChain(ServerHttpSecurity http){
    
            http.oauth2Login().and().authorizeExchange()
                    .pathMatchers("/hello2").hasRole("USER")
                    .pathMatchers("/**").permitAll();
    
            http.oauth2Login().authenticationManager(new OAuth2LoginReactiveAuthenticationManager(oAuth2AccessTokenResponseClient,oAuth2UserService));
    
            return http.build();
        }
    }

**\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\***

**controller 层**

**HelloController**

@RestController
    public class HelloController {
    
        @RequestMapping("/hello2")
        public String hello(Principal principal){
            System.out.println(principal);
    
            return "hello "+principal.getName();
        }
    
        @RequestMapping("/")
        public String redirect(){
            return "redirect";
        }
    }

### \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\* ###

**使用测试**

**localhost:8080/hello2**

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzkzMTYyNQ_size_16_color_FFFFFF_t_70][]

**认证通过后，输出：hello lihu12344**

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzkzMTYyNQ_size_16_color_FFFFFF_t_70]: https://img-blog.csdnimg.cn/20200613175612952.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzkzMTYyNQ==,size_16,color_FFFFFF,t_70