java - 如何设置自定义 OAuth2RestTemplate 或自定义 OAuth2ProtectedResourceDetails？

Question

我有启用了 @EnableOAuth2Sso 的前端应用程序。另外，我想使用自定义 OAuth2ProtectedResourceDetails 注入(inject)所有 OAuth2RestTemplate beans(特别是重新定义 OAuth2RestOperationsConfiguration 中 OAuth2RestTemplate 的行为)。我刚刚为 OAuth2ProtectedResourceDetails 定义了自己的 bean，但 OAuth2RestTemplate 仍然使用 AuthorizationCodeResourceDetails)。

@SpringBootApplication(scanBasePackages = {"base.package"})
@EnableOAuth2Sso
@EnableZuulProxy
public class Application extends WebSecurityConfigurerAdapter {

public static void main(String[] args) {
    SpringApplication.run(Application.class, args);
}

@Autowired
private RedirectUriResolver redirectUriResolver;

@Override
public void configure(HttpSecurity http) throws Exception {
    // some http configuration
}

@Bean
public OAuth2ProtectedResourceDetails resource() {
    AuthorizationCodeResourceDetails resource = new CustomAuthorizationCodeResourceDetails(redirectUriResolver);
    return resource;
}
}

我应该以某种方式重新定义整个 OAuth2RestTemplate bean 还是只是这个 OAuth2ProtectedResourceDetails？

Answer 1

您应该能够使用自己的方法重载在 OAuth2RestOperationsConfiguration 中设置的 Bean

    @Bean
    @ConfigurationProperties("security.oauth2.client")
    public ClientCredentialsResourceDetails oauth2RemoteResource() {
        ClientCredentialsResourceDetails details = new ClientCredentialsResourceDetails();
        return details;
    }

如果没有，只需创建自己的bean

@Bean
@ConfigurationProperties("security.oauth2.client")
public ClientCredentialsResourceDetails customOauth2RemoteResource() {
    ClientCredentialsResourceDetails details = new ClientCredentialsResourceDetails();
    return details;
}

@Bean
public OAuth2RestTemplate customOauth2RestTemplate() {
    OAuth2RestTemplate template = new OAuth2RestTemplate(customOauth2RemoteResource(),
            new DefaultOAuth2ClientContext());
    return template;
}

然后使用@Qualifier来引用它们

@Autowired
@Qualifier("customOauth2RestTemplate")
private RestTemplate restTemplate;