Spring 安全+火力地堡

Question

我在 Spring Boot 和 oauth2(由 Google 提供)上编写了 rest 后端，在 "/login" 上自动重定向。除了 web 的 oauth 之外，我还想在移动后端进行 Firebase 身份验证，就像下面的算法一样:

User authorizes on mobile -> User sends request -> Backend gets request -> Backend checks if user openid exists in local database -> Backend returns response or exception page

以下代码是我当前的 WebSecurityConfiguration:

@Configuration
@EnableWebSecurity
@EnableOAuth2Sso
public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http.authorizeRequests().mvcMatchers("/","/static/**","/public/**","/assets/**","/api/sensors/**", "/emulator/**").permitAll()
                .anyRequest().authenticated()
                .and().logout().logoutSuccessUrl("/").permitAll()
                .and()
                .csrf().disable();
    }

    @Bean
    public PrincipalExtractor principalExtractor(PersonRepository personRepository) {
        return map -> {
            String id = (String) map.get("sub");
            Person person1 = personRepository.findById(id).orElseGet(() -> {
                Person person = new Person();
                person.setPersonId(id);
                person.getDetails().setFirstName((String) map.get("given_name"));
                person.getDetails().setLastName((String) map.get("family_name"));
                person.getDetails().setEmail((String) map.get("email"));
                person.getDetails().setPictureUrl((String) map.get("picture"));
                person.getSettings().setLocale(new Locale((String) map.get("locale")));

                person.setPersonRole(PersonRole.USER);
                person.setStatus(PersonStatus.NORMAL);
                person.newToken();
                return person;
            });
            return personRepository.save(person1);
        };
    }
}

Answer 1

添加以下形式的 Firebase 配置 Bean:

import javax.annotation.PostConstruct;

import org.springframework.beans.factory.annotation.Value;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;

import com.google.firebase.*;

@Configuration
public class FirebaseConfig {

    @Bean
    public DatabaseReference firebaseDatabse() {
        DatabaseReference firebase = FirebaseDatabase.getInstance().getReference();
        return firebase;
    }

    @Value("${firebase.database.url}")
    private String databaseUrl;

    @Value("${firebase.config.path}")
    private String configPath;

    @PostConstruct
    public void init() {

        /**
         * https://firebase.google.com/docs/server/setup
         * 
         * Create service account , download json
         */
        InputStream inputStream = FirebaseConfig.class.getClassLoader().getResourceAsStream(configPath);

        FirebaseOptions options = new FirebaseOptions.Builder().setServiceAccount(inputStream)
                .setDatabaseUrl(databaseUrl).build();
        FirebaseApp.initializeApp(options);

    }
}

在你的application.properties中，添加

firebase.config.path=Configuration.json
firebase.database.url=<firebase-database-path>

您可以引用此 page 为您的 Firebase 项目下载 Configuration.json