Oauth2 Java配置JDBC

我有一個oauth2的工作示例，併爲資源的客戶端和所有者進行內存認證和授權。我試圖將其轉換爲JDBC身份驗證和授權，但很成功。我不斷收到Bad Credentials錯誤。過濾器安全性經過對我來說是相當困惑的調試:-)Oauth2 Java配置JDBC

插入是我的java代碼，它現在使用inmemory認證用戶，但不是爲客戶端。該模式與this相同。

是否有使用JDBC身份驗證和授權的OAuth2.0與 Java的配置某處一個完整的工作的例子嗎？

-------------------代碼below--

public class WebSecurityConfig extends OAuth2ServerConfigurerAdapter { 
    private final static Logger logger = LogFactory.getLogger(WebSecurityConfig.class); 



    private JdbcClientDetailsService jdbcClientDetailsService; 
    private JdbcTokenStore jdbcTokenStore; 
    private JdbcUserDetailsManagerConfigurer jdbcUserDetailsManagerConfigurer; 
    // @formatter:off 
    @Override 
    protected void configure(HttpSecurity http) throws Exception { 
     OAuth2ServerConfigurer oAuth2ServerConfigurer = new OAuth2ServerConfigurer().tokenStore(jdbcTokenStore); 
     http 
      .requestMatchers() 
       .and() 
      .authorizeRequests() 
       .antMatchers("/").permitAll() 
       .anyRequest().authenticated() 
       .and() 
      .apply(oAuth2ServerConfigurer); 
     http.setSharedObject(ClientDetailsService.class, jdbcClientDetailsService); 

    } 
    // @formatter:on 

// // @formatter:off 
// @Override 
    protected void configure(AuthenticationManagerBuilder auth) throws Exception { 
//  int validityInSec = Integer.parseInt(validtityInSeconds); 

     auth 
       .userDetailsService(new InMemoryUserDetailsManager(getUserDetails())); 

    } 
    // @formatter:on 
// 
    private final Collection<UserDetails> getUserDetails() { 
     List<UserDetails> userDetails = new ArrayList<UserDetails>(); 
     userDetails.add(new User("auction", "password", AuthorityUtils.createAuthorityList(
       "USER", "read", "write"))); 
     return userDetails; 
    } 


    @Autowired 
    @Qualifier("oauth_details_ds") 
    public void setDataSource(DataSource dataSource){ 
     jdbcClientDetailsService = new JdbcClientDetailsService(dataSource); 
     jdbcTokenStore = new JdbcTokenStore(dataSource); 
//  try { 
//   jdbcUserDetailsManagerConfigurer = new JdbcUserDetailsManagerConfigurer().dataSource(dataSource); 
//  } catch (Exception e) { 
//   logger.error("Bad code design: ",e); 
//   e.printStackTrace(); 
//  } 
    } 



}

來源

2014-03-04 user3304825

爲什麼不在你的security.xml中配置JDBC？該文檔顯示瞭如何做到這一點...... – OhadR

我使用的是從你把你的問題的URL相同的模式。我使用的是postgres，所以我不得不改變一些類型（varchar - > character varying，LONGVARBINARY - > bytea）。此外，我的數據源是建立在一個單獨的配置類，看起來像這樣：

@Bean 
public DataSource dataSource() { 
    BoneCPDataSource dataSource = new BoneCPDataSource(); 

    dataSource.setDriverClass("org.postgresql.Driver"); 
    dataSource.setJdbcUrl("jdbc:postgresql://localhost/oauthDB"); 
    dataSource.setUsername("my_username"); 
    dataSource.setPassword("*****"); 

    return dataSource; 
}

我使用Sparklr2（https://github.com/spring-projects/spring-security-oauth/tree/master/samples/oauth2/sparklr）提供的例子，讓我有隔壁班：

@Configuration 
@EnableWebSecurity 
public class OAuth2ServerConfig extends WebSecurityConfigurerAdapter { 

    @Autowired 
    private TokenStore tokenStore; 

    private static DataSource dataSource; 
    @Autowired 
    private void setDataSource(DataSource dataSourcee) { 
     dataSource = dataSourcee; 
    } 

//... SOME MORE CODE ... 

@Configuration 
@Order(1) 
protected static class AuthorizationServerConfiguration extends 
     OAuth2AuthorizationServerConfigurerAdapter { 

    private TokenStore tokenStore = new JdbcTokenStore(dataSource);

其餘代碼幾乎與Sparklr2相同

來源

2014-03-04 20:17:51 fakefla

Oauth2 Java配置JDBC

回答

相關問題