Java OAuth2RestOperations类代码示例

import org.springframework.security.oauth2.client.OAuth2RestOperations; //导入依赖的package包/类
@Bean
    public OAuth2RestOperations oAuth2RestOperations() {

        ResourceOwnerPasswordResourceDetails resource = new ResourceOwnerPasswordResourceDetails();
        resource.setAccessTokenUri(tokenUri);

        resource.setId(resourceId);
        resource.setClientId(resourceClientId);
        resource.setClientSecret(resourceClientSecret);

        resource.setGrantType("password");
        resource.setScope(Arrays.asList("openid"));

        resource.setUsername(resourceUserId);
        resource.setPassword(resourceUserPassword);

        OAuth2RestTemplate template = new OAuth2RestTemplate(resource);
//        template.setRequestFactory(requestFactory);
        return template;
    }
 

import org.springframework.security.oauth2.client.OAuth2RestOperations; //导入依赖的package包/类
@Bean
    public OAuth2RestOperations oAuth2RestOperations() {

        ResourceOwnerPasswordResourceDetails resource = new ResourceOwnerPasswordResourceDetails();
        resource.setAccessTokenUri(tokenUrl);
        resource.setId(resourceId);
        resource.setClientId(resourceClientId);
        resource.setClientSecret(resourceClientSecret);

        resource.setGrantType("password");

        resource.setScope(Arrays.asList("openid"));

        resource.setUsername("[email protected]");
        resource.setPassword("user1");

        OAuth2RestTemplate template = new OAuth2RestTemplate(resource);
//        template.setRequestFactory(requestFactory);
        return template;
    }
 

import org.springframework.security.oauth2.client.OAuth2RestOperations; //导入依赖的package包/类
/**
 * 演示 grant_type=authorization_code 时，获取资源的方法
 * -
 *
 * @param client_id
 * @param client_secret     取决于 AuthorizationServer 设置，如果 client 设置了secret，则此项参数为必需，否则可以没有
 * @param access_token_uri
 * @param authorization_uri
 * @param scope
 * @return
 */

public OAuth2RestOperations authorizationCodeRestTemplate(String client_id, String client_secret, String authorization_uri, String access_token_uri, String... scope) {

    // 防止 url 写错
    if (!access_token_uri.contains("token") || !authorization_uri.contains("authorize"))
        throw new RuntimeException("uri is wrong :  access_token_uri = " + access_token_uri + " , authorization_uri" + authorization_uri);


    AuthorizationCodeResourceDetails details = new AuthorizationCodeResourceDetails();
    details.setId("1");
    details.setClientId(client_id);
    if (client_secret != null && !client_secret.isEmpty())
        details.setClientSecret(client_secret);
    details.setAccessTokenUri(access_token_uri);
    details.setUserAuthorizationUri(authorization_uri);
    details.setUseCurrentUri(true); //将当前请求的 uri 作为参数 redirect_uri 接受返回值。设置为 faslse 是，需要设置 redirect_uri 参数, details.setPreEstablishedRedirectUri("http://anywhere");
    details.setScope(Arrays.asList(scope));
    return new OAuth2RestTemplate(details, oAuth2ClientContext);
}
 

import org.springframework.security.oauth2.client.OAuth2RestOperations; //导入依赖的package包/类
/**
 * 该方式没有实验成功，设置为 Deprecated!
 * <p>
 * 演示 grant_type=implicit 时，获取资源的方法
 *
 * @param client_id
 * @param client_secret     取决于 AuthorizationServer 设置，如果 client 设置了secret，则此项参数为必需，否则可以没有
 * @param authorization_uri
 * @param access_token_uri
 * @param scope
 * @return
 */
@Deprecated
public OAuth2RestOperations implicitResourceRestTemplate(String client_id, String client_secret, String authorization_uri, String access_token_uri, String... scope) {

    // 防止 url 写错
    if (!authorization_uri.contains("authorize"))
        throw new RuntimeException("uri is wrong :  authorization_uri" + authorization_uri);

    ImplicitResourceDetails details = new ImplicitResourceDetails();
    details.setId("2");
    details.setClientId(client_id);
    if (client_secret != null && !client_secret.isEmpty())
        details.setClientSecret(client_secret);
    details.setAccessTokenUri(authorization_uri);
    details.setClientAuthenticationScheme(AuthenticationScheme.header);
    details.setUseCurrentUri(true);
    details.setScope(Arrays.asList(scope));
    // return restTemplate;
    return new OAuth2RestTemplate(details, oAuth2ClientContext);
}
 

import org.springframework.security.oauth2.client.OAuth2RestOperations; //导入依赖的package包/类
/**
 * 演示 grant_type=password 时，获取资源的方法
 * 用的场景还不知道，@Deprecated
 *
 * @param client_id
 * @param client_secret    取决于 AuthorizationServer 设置，如果 client 设置了secret，则此项参数为必需，否则可以没有
 * @param access_token_uri
 * @param username
 * @param password
 * @param scope
 * @return
 */
@Deprecated
public OAuth2RestOperations resourceOwnerPasswordRestTemplate(String client_id, String client_secret, String access_token_uri, String username, String password, String... scope) {

    // 防止 url 写错
    if (!access_token_uri.contains("token"))
        throw new RuntimeException("uri is wrong :  access_token_uri = " + access_token_uri);

    // 防止 client_secret 写错
    if (username == null || password == null || username.isEmpty() || password.isEmpty())
        throw new RuntimeException("username or password  is wrong :  username or password is a required parameter");

    ResourceOwnerPasswordResourceDetails details = new ResourceOwnerPasswordResourceDetails();
    details.setId("3");
    details.setClientId(client_id);
    if (client_secret != null && !client_secret.isEmpty())
        details.setClientSecret(client_secret);
    details.setAccessTokenUri(access_token_uri);
    details.setUsername(username);
    details.setPassword(password);
    details.setScope(Arrays.asList(scope));
    return new OAuth2RestTemplate(details, oAuth2ClientContext);


}
 

import org.springframework.security.oauth2.client.OAuth2RestOperations; //导入依赖的package包/类
/**
 * 演示 grant_type=client_credentials 时，获取资源的方法
 *
 * @param client_id
 * @param client_secret    取决于 AuthorizationServer 设置，如果 client 设置了secret，则此项参数为必需，否则可以没有
 * @param access_token_uri
 * @param scope
 * @return
 */
public OAuth2RestOperations clientCredentialsRestTemplate(String client_id, String client_secret, String access_token_uri, String... scope) {

    // 防止 url 写错
    if (!access_token_uri.contains("token"))
        throw new RuntimeException("uri is wrong :  access_token_uri = " + access_token_uri);

    ClientCredentialsResourceDetails details = new ClientCredentialsResourceDetails();
    details.setId("4");
    details.setClientId(client_id);
    if (client_secret != null && !client_secret.isEmpty())
        details.setClientSecret(client_secret);
    details.setAccessTokenUri(access_token_uri);
    details.setScope(Arrays.asList(scope));
    return new OAuth2RestTemplate(details, oAuth2ClientContext);
}
 

import org.springframework.security.oauth2.client.OAuth2RestOperations; //导入依赖的package包/类
@SuppressWarnings({ "unchecked" })
private Map<String, Object> getMap(String path, String accessToken) {
	this.logger.info("Getting user info from: " + path);
	try {
		OAuth2RestOperations restTemplate = this.restTemplate;
		if (restTemplate == null) {
			BaseOAuth2ProtectedResourceDetails resource = new BaseOAuth2ProtectedResourceDetails();
			resource.setClientId(this.clientId);
			restTemplate = new OAuth2RestTemplate(resource);
		}
		DefaultOAuth2AccessToken token = new DefaultOAuth2AccessToken(accessToken);
		token.setTokenType(this.tokenType);
		restTemplate.getOAuth2ClientContext().setAccessToken(token);
		return restTemplate.getForEntity(path, Map.class).getBody();
	}
	catch (Exception ex) {
		this.logger.info("Could not fetch user details: " + ex.getClass() + ", "
				+ ex.getMessage());
		return Collections.<String, Object>singletonMap("error",
				"Could not fetch user details");
	}
}
 

import org.springframework.security.oauth2.client.OAuth2RestOperations; //导入依赖的package包/类
@Test
public void tokenRelayedWithRestTemplate() {
	OAuth2RestOperations restTemplate = Mockito.mock(OAuth2RestOperations.class);
	AuthorizationCodeResourceDetails resource = new AuthorizationCodeResourceDetails();
	resource.setClientId("client");
	Mockito.when(restTemplate.getResource()).thenReturn(resource);
	Mockito.when(restTemplate.getAccessToken())
			.thenReturn(new DefaultOAuth2AccessToken("BAR"));
	filter.setRestTemplate(restTemplate);
	assertNotNull(RequestContext.getCurrentContext());
	SecurityContextHolder.getContext().setAuthentication(auth);
	assertTrue(filter.shouldFilter());
	assertEquals("FOO", RequestContext.getCurrentContext().get("ACCESS_TOKEN"));
	filter.run();
	assertEquals("bearer BAR", RequestContext.getCurrentContext()
			.getZuulRequestHeaders().get("authorization"));
}
 

import org.springframework.security.oauth2.client.OAuth2RestOperations; //导入依赖的package包/类
@Test
public void unauthorizedWithRestTemplate() {
	OAuth2RestOperations restTemplate = Mockito.mock(OAuth2RestOperations.class);
	AuthorizationCodeResourceDetails resource = new AuthorizationCodeResourceDetails();
	resource.setClientId("client");
	Mockito.when(restTemplate.getResource()).thenReturn(resource);
	Mockito.when(restTemplate.getAccessToken()).thenThrow(new RuntimeException());
	filter.setRestTemplate(restTemplate);
	assertNotNull(RequestContext.getCurrentContext());
	SecurityContextHolder.getContext().setAuthentication(auth);
	assertTrue(filter.shouldFilter());
	try {
		filter.run();
		fail("Expected BadCredentialsException");
	}
	catch (BadCredentialsException e) {
		assertEquals(401,
				RequestContext.getCurrentContext().get("error.status_code"));

	}
}
 

import org.springframework.security.oauth2.client.OAuth2RestOperations; //导入依赖的package包/类
private ResponseEntity<ShimDataResponse> getDataForSingleDate(
        OAuth2RestOperations restTemplate,
        LocalDate date,
        FitbitDataType dataType,
        boolean normalize) throws ShimException {

    String detailLevel = "";

    // TODO generalise this
    if (fitbitClientSettings.isIntradayDataAvailable()) {
        if (dataType == STEP_COUNT || dataType == HEART_RATE) {
            detailLevel = format("/1d/%dmin", fitbitClientSettings.getIntradayDataGranularityInMinutes());
        }
    }

    URI url = UriComponentsBuilder
            .fromUriString(DATA_URL)
            .path("/{apiVersion}/user/-/{endpoint}/date/{date}{detailLevel}.json")
            .buildAndExpand(dataType.getVersion(), dataType.getEndpoint(), date.toString(), detailLevel)
            .encode()
            .toUri();

    return executeRequest(restTemplate, url, normalize, dataType, date);
}
 

import org.springframework.security.oauth2.client.OAuth2RestOperations; //导入依赖的package包/类
private OAuth2ClientAuthenticationProcessingFilter oauth2SsoFilter(
		OAuth2SsoProperties sso) {
	OAuth2RestOperations restTemplate = this.applicationContext
			.getBean(UserInfoRestTemplateFactory.class).getUserInfoRestTemplate();
	ResourceServerTokenServices tokenServices = this.applicationContext
			.getBean(ResourceServerTokenServices.class);
	OAuth2ClientAuthenticationProcessingFilter filter = new OAuth2ClientAuthenticationProcessingFilter(
			sso.getLoginPath());
	filter.setRestTemplate(restTemplate);
	filter.setTokenServices(tokenServices);
	filter.setApplicationEventPublisher(this.applicationContext);
	return filter;
}
 

import org.springframework.security.oauth2.client.OAuth2RestOperations; //导入依赖的package包/类
@Test
public void testDefaultConfiguration() {
	this.context = new AnnotationConfigServletWebServerApplicationContext();
	this.context.register(AuthorizationAndResourceServerConfiguration.class,
			MinimalSecureWebApplication.class);
	this.context.refresh();
	this.context.getBean(AUTHORIZATION_SERVER_CONFIG);
	this.context.getBean(RESOURCE_SERVER_CONFIG);
	this.context.getBean(OAuth2MethodSecurityConfiguration.class);
	ClientDetails config = this.context.getBean(BaseClientDetails.class);
	AuthorizationEndpoint endpoint = this.context
			.getBean(AuthorizationEndpoint.class);
	UserApprovalHandler handler = (UserApprovalHandler) ReflectionTestUtils
			.getField(endpoint, "userApprovalHandler");
	ClientDetailsService clientDetailsService = this.context
			.getBean(ClientDetailsService.class);
	ClientDetails clientDetails = clientDetailsService
			.loadClientByClientId(config.getClientId());
	assertThat(AopUtils.isJdkDynamicProxy(clientDetailsService)).isTrue();
	assertThat(AopUtils.getTargetClass(clientDetailsService).getName())
			.isEqualTo(InMemoryClientDetailsService.class.getName());
	assertThat(handler).isInstanceOf(ApprovalStoreUserApprovalHandler.class);
	assertThat(clientDetails).isEqualTo(config);
	verifyAuthentication(config);
	assertThat(this.context.getBeanNamesForType(OAuth2RestOperations.class))
			.isEmpty();
}
 

import org.springframework.security.oauth2.client.OAuth2RestOperations; //导入依赖的package包/类
@Bean
@SuppressWarnings("unchecked")
public AuthoritiesExtractor authoritiesExtractor(OAuth2RestOperations template) {
	return map -> {
		ArrayList<String> list = (ArrayList<String>) map.get("authorities");
		if (!list.isEmpty()) {
			return AuthorityUtils.commaSeparatedStringToAuthorityList(StringUtils.collectionToCommaDelimitedString(list));
		}
		return AuthorityUtils.commaSeparatedStringToAuthorityList("ROLE_USER");
	};
}
 

import org.springframework.security.oauth2.client.OAuth2RestOperations; //导入依赖的package包/类
/**
 * Builds proxy instance of {@link RestTemplate} which load OAuth resouce details from DB on each operation
 *
 * @param name                Name/ID of resource of {@link RestTemplate}
 * @param oauth2ClientContext OAuth Client context
 * @return Proxy instance of {@link RestTemplate}
 */
public OAuth2RestOperations getRestTemplate(String name, OAuth2ClientContext oauth2ClientContext) {
	return newProxy(OAuth2RestOperations.class, (proxy, method, args) -> {
		try {
			return method.invoke(new OAuth2RestTemplate(loadResourceDetails(name), oauth2ClientContext), args);

		} catch (InvocationTargetException e) {
			throw e.getTargetException();
		}
	});
}
 

import org.springframework.security.oauth2.client.OAuth2RestOperations; //导入依赖的package包/类
/**
 * 演示 grant_type=authorization_code 时，获取资源的方法
 *
 * @return
 */
@RequestMapping("/authorization_code")
@ResponseBody
public JsonNode authorizationCode() {
    logger.info("grant_type=authorization_code  ... ");
    OAuth2RestOperations operations = restTemplate.authorizationCodeRestTemplate(client_id, client_secret, user_authorization_uri, access_token_uri, scopes);
    logger.info("access_token:" + operations.getAccessToken().getValue());

    return operations.getForObject(resource_server_url +"/foos/1", JsonNode.class);  // getForObject 发送 get 方法，获取的数据类型由具体的数据类型确定，此处 JsonNode 表示返回值为 json 类型
}