Java AccessTokenConverter类代码示例

import org.springframework.security.oauth2.provider.token.AccessTokenConverter; //导入依赖的package包/类
@Override
public OAuth2Authentication loadAuthentication(String token) {
    AccessToken accessToken = validateAccessToken(token);

    Set<String> scopes = new HashSet<>();
    if (accessToken.getScopes() != null) {
        for (Scope scope : accessToken.getScopes()) {
            scopes.add(scope.toString());
        }
    }

    Map<String, String> parameters = new HashMap<>();
    parameters.put(AccessTokenConverter.CLIENT_ID, accessToken.getClientId());
    OAuth2Request authRequest = new OAuth2Request(parameters, accessToken.getClientId(), null, true, scopes, null, null,
            null, null);

    Authentication auth = null;

    if (!accessToken.isClientOnly()) {
        User authUser = new User.Builder(accessToken.getUserName()).setId(accessToken.getUserId()).build();

        auth = new UsernamePasswordAuthenticationToken(authUser, null, new ArrayList<GrantedAuthority>());
    }

    return new OAuth2Authentication(authRequest, auth);
}
 

import org.springframework.security.oauth2.provider.token.AccessTokenConverter; //导入依赖的package包/类
/**
 * Create a cookie out of the given refresh token.
 * Refresh token cookies contain the base64 encoded refresh token (a JWT token).
 * They also contain a hint whether the refresh token was for remember me or not.
 * If not, then the cookie will be prefixed by the timestamp it was created at followed by a pipe '|'.
 * This gives us the chance to expire session cookies regardless of the token duration.
 */
private Cookie createRefreshTokenCookie(OAuth2RefreshToken refreshToken, boolean rememberMe) {
    int maxAge = -1;
    String name = SESSION_TOKEN_COOKIE;
    String value = refreshToken.getValue();
    if (rememberMe) {
        name = REFRESH_TOKEN_COOKIE;
        //get expiration in seconds from the token's "exp" claim
        Integer exp = getClaim(refreshToken.getValue(), AccessTokenConverter.EXP, Integer.class);
        if (exp != null) {
            int now = (int) (System.currentTimeMillis() / 1000L);
            maxAge = exp - now;
            log.debug("refresh token valid for another {} secs", maxAge);
            //let cookie expire a bit earlier than the token to avoid race conditions
            maxAge -= REFRESH_TOKEN_EXPIRATION_WINDOW_SECS;
        }
    }
    Cookie refreshTokenCookie = new Cookie(name, value);
    refreshTokenCookie.setMaxAge(maxAge);
    return refreshTokenCookie;
}
 

import org.springframework.security.oauth2.provider.token.AccessTokenConverter; //导入依赖的package包/类
public OAuth2AuthorizationServerConfiguration(BaseClientDetails details,
		AuthenticationConfiguration authenticationConfiguration,
		ObjectProvider<TokenStore> tokenStore,
		ObjectProvider<AccessTokenConverter> tokenConverter,
		AuthorizationServerProperties properties) throws Exception {
	this.details = details;
	this.authenticationManager = authenticationConfiguration.getAuthenticationManager();
	this.tokenStore = tokenStore.getIfAvailable();
	this.tokenConverter = tokenConverter.getIfAvailable();
	this.properties = properties;
}
 

import org.springframework.security.oauth2.provider.token.AccessTokenConverter; //导入依赖的package包/类
/**
 * Token converter and enhancer
 * @return
 */
@Bean
public JwtAccessTokenConverter jwtAccessTokenConverter(AccessTokenConverter accessTokenConverter) {
	JwtAccessTokenConverter tokenConverter = new JwtAccessTokenConverter();
	tokenConverter.setAccessTokenConverter(accessTokenConverter);
	return tokenConverter;
}
 

import org.springframework.security.oauth2.provider.token.AccessTokenConverter; //导入依赖的package包/类
public OAuth2AuthorizationServerConfig(AccessTokenConverter accessTokenConverter, ApprovalStore approvalStore, AuthenticationManager authenticationManager, OAuth2ClientService clientService, TokenEnhancer tokenEnhancer, TokenStore tokenStore) {
	this.accessTokenConverter = accessTokenConverter;
	this.approvalStore = approvalStore;
	this.authenticationManager = authenticationManager;
	this.clientService = clientService;
	this.tokenEnhancer = tokenEnhancer;
	this.tokenStore = tokenStore;
}
 

import org.springframework.security.oauth2.provider.token.AccessTokenConverter; //导入依赖的package包/类
@Bean
@Primary
public AccessTokenConverter accessTokenConverter() {
    DefaultAccessTokenConverter defaultAccessTokenConverter = new DefaultAccessTokenConverter();
    defaultAccessTokenConverter.setUserTokenConverter(userAuthenticationConverter());
    return defaultAccessTokenConverter;
}
 

import org.springframework.security.oauth2.provider.token.AccessTokenConverter; //导入依赖的package包/类
@Autowired
public AuthorizationServerConfiguration(AuthenticationManager authenticationManager,
                                        CustomClientDetailsService customClientDetailsService,
                                        AuthorizationServerTokenServices tokenServices, TokenStore tokenStore,
                                        OAuth2RequestFactory requestFactory, UserDetailsService userDetailsService, AccessTokenConverter accessTokenConverter) {
    super();
    this.authenticationManager = authenticationManager;
    this.customClientDetailsService = customClientDetailsService;
    this.tokenServices = tokenServices;
    this.tokenStore = tokenStore;
    this.requestFactory = requestFactory;
    this.userDetailsService = userDetailsService;
    this.accessTokenConverter = accessTokenConverter;
}
 

import org.springframework.security.oauth2.provider.token.AccessTokenConverter; //导入依赖的package包/类
/**
 * AccessTokenConverter bean initializer.
 */
@Bean
public AccessTokenConverter accessTokenConverter() {
  DefaultAccessTokenConverter defaultAccessTokenConverter = new DefaultAccessTokenConverter();
  defaultAccessTokenConverter.setUserTokenConverter(new CustomUserAuthenticationConverter());
  return defaultAccessTokenConverter;
}
 

import org.springframework.security.oauth2.provider.token.AccessTokenConverter; //导入依赖的package包/类
public AuthorizationServerConfiguration(BaseClientDetails details, AuthenticationManager authenticationManager,
                                        ObjectProvider<TokenStore> tokenStore,
                                        ObjectProvider<AccessTokenConverter> tokenConverter,
                                        ObjectProvider<TokenEnhancer> tokenEnhancer,
                                        AuthorizationServerProperties properties) {
    super(details, authenticationManager, tokenStore, tokenConverter, properties);
    this.tokenEnhancer = tokenEnhancer.getIfAvailable();
}
 

import org.springframework.security.oauth2.provider.token.AccessTokenConverter; //导入依赖的package包/类
public AuthzResourceServerTokenServices(String authzCheckTokenClientId, String authzCheckTokenSecret, String authzCheckTokenEndpointUrl, AccessTokenConverter accessTokenConverter) {
  super();
  setCheckTokenEndpointUrl(authzCheckTokenEndpointUrl);
  setClientId(authzCheckTokenClientId);
  setClientSecret(authzCheckTokenSecret);

  setAccessTokenConverter(accessTokenConverter);

}
 

import org.springframework.security.oauth2.provider.token.AccessTokenConverter; //导入依赖的package包/类
@Bean
public AccessTokenConverter accessTokenConverter() throws IOException {
    final JwtAccessTokenConverter jwtTokenEnhancer = new JwtAccessTokenConverter();
    jwtTokenEnhancer.setSigningKey(IOUtils.toString(getClass().getResourceAsStream("/security/tokensigningkey")));
    jwtTokenEnhancer.setVerifierKey(IOUtils.toString(getClass().getResourceAsStream("/security/tokensigningkey.pub")));
    return jwtTokenEnhancer;
}
 

import org.springframework.security.oauth2.provider.token.AccessTokenConverter; //导入依赖的package包/类
@Bean(name = "dashboardAccessTokenConverter")
public AccessTokenConverter dashboardAccessTokenConverter() {
    final DefaultAccessTokenConverter defaultAccessTokenConverter = new DefaultAccessTokenConverter();

    final DefaultUserAuthenticationConverter userTokenConverter = new DefaultUserAuthenticationConverter();
    userTokenConverter.setDefaultAuthorities(new String[]{"ROLE_" + ApplicationWebSecurityConfigurerAdapter.ROLE_DASHBOARD});

    defaultAccessTokenConverter.setUserTokenConverter(userTokenConverter);

    return defaultAccessTokenConverter;
}
 

import org.springframework.security.oauth2.provider.token.AccessTokenConverter; //导入依赖的package包/类
@Bean
public AccessTokenConverter accessTokenConverter() {
    DefaultAccessTokenConverter converter = new DefaultAccessTokenConverter();
    converter.setUserTokenConverter(userTokenConverter());
    return converter;
}
 

import org.springframework.security.oauth2.provider.token.AccessTokenConverter; //导入依赖的package包/类
public JweTokenEnhancer(AccessTokenConverter tokenConverter,
    JweTokenSerializer tokenSerializer) {
    this.tokenConverter = tokenConverter;
    this.tokenSerializer = tokenSerializer;
}
 

import org.springframework.security.oauth2.provider.token.AccessTokenConverter; //导入依赖的package包/类
@Bean
public AccessTokenConverter accessTokenConverter() {
	return new DefaultAccessTokenConverter();
}