org.ballcat.springsecurity.oauth2.server.authorization.autoconfigure

类 OAuth2AuthorizationServerAutoConfiguration

java.lang.Object

org.ballcat.springsecurity.oauth2.server.authorization.autoconfigure.OAuth2AuthorizationServerAutoConfiguration

@Import(value={OAuth2AuthorizationServerConfigurerCustomizerConfiguration.class,OAuth2AuthorizationServerExtensionConfigurerConfiguration.class})
 @Configuration(proxyBeanMethods=false)
 @EnableConfigurationProperties(value=OAuth2AuthorizationServerProperties.class)
public class OAuth2AuthorizationServerAutoConfiguration
extends Object

OAuth2授权服务器自动配置类

作者:

Hccake

字段概要

字段

限定符和类型	字段和说明
static String	OAUTH2_AUTHORIZATION_SERVER_SECURITY_FILTER_CHAIN_BEAN_NAME

构造器概要

构造器

构造器和说明
OAuth2AuthorizationServerAutoConfiguration()

方法概要

限定符和类型	方法和说明
org.springframework.security.oauth2.server.authorization.OAuth2AuthorizationConsentService	authorizationConsentService(org.springframework.jdbc.core.JdbcTemplate jdbcTemplate, org.springframework.security.oauth2.server.authorization.client.RegisteredClientRepository registeredClientRepository) OAuth2AuthorizationConsentService
org.springframework.security.oauth2.server.authorization.settings.AuthorizationServerSettings	authorizationServerSettings() 授权服务器基本端点地址配置
org.springframework.security.oauth2.server.authorization.OAuth2AuthorizationService	authorizationService(org.springframework.jdbc.core.JdbcTemplate jdbcTemplate, org.springframework.security.oauth2.server.authorization.client.RegisteredClientRepository registeredClientRepository, org.springframework.beans.factory.ObjectProvider<OAuth2AuthorizationObjectMapperCustomizer> objectMapperCustomizerObjectProvider) OAuth2 授权管理Service
org.springframework.security.web.SecurityFilterChain	oauth2AuthorizationServerSecurityFilterChain(OAuth2AuthorizationServerSecurityFilterChainBuilder builder, org.springframework.security.config.annotation.web.builders.HttpSecurity httpSecurity) OAuth2 授权服务器的安全过滤器链，如果和资源服务器共存，需要将其放在资源服务器之前
OAuth2AuthorizationServerSecurityFilterChainBuilder	oAuth2AuthorizationServerSecurityFilterChainBuilder(List<OAuth2AuthorizationServerConfigurerCustomizer> oAuth2AuthorizationServerConfigurerCustomizers, List<OAuth2AuthorizationServerExtensionConfigurer<?,org.springframework.security.config.annotation.web.builders.HttpSecurity>> oAuth2AuthorizationServerExtensionConfigurers) OAuth2AuthorizationServerConfigurer 的适配器
org.springframework.security.oauth2.server.authorization.token.OAuth2TokenCustomizer<org.springframework.security.oauth2.server.authorization.token.OAuth2TokenClaimsContext>	oAuth2TokenCustomizer() 对于使用不透明令牌的 client，需要存储对应的用户信息，以便在后续的请求中获取用户信息
OAuth2TokenRevocationResponseHandler	oAuth2TokenRevocationResponseHandler(org.springframework.context.ApplicationEventPublisher publisher) OAuth2 Token 撤销响应处理器
org.springframework.security.crypto.password.PasswordEncoder	passwordEncoder() 密码管理器
org.springframework.security.oauth2.server.authorization.client.RegisteredClientRepository	registeredClientRepository(org.springframework.jdbc.core.JdbcTemplate jdbcTemplate) OAuth2 授权服务器中注册的 client 仓库

从类继承的方法 java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

字段详细资料

OAUTH2_AUTHORIZATION_SERVER_SECURITY_FILTER_CHAIN_BEAN_NAME

public static final String OAUTH2_AUTHORIZATION_SERVER_SECURITY_FILTER_CHAIN_BEAN_NAME

另请参阅:

常量字段值

构造器详细资料

OAuth2AuthorizationServerAutoConfiguration

public OAuth2AuthorizationServerAutoConfiguration()

方法详细资料

oAuth2AuthorizationServerSecurityFilterChainBuilder

@Bean
 @ConditionalOnMissingBean(name="oauth2AuthorizationServerSecurityFilterChain",
                          value=OAuth2AuthorizationServerSecurityFilterChainBuilder.class)
public OAuth2AuthorizationServerSecurityFilterChainBuilder oAuth2AuthorizationServerSecurityFilterChainBuilder(List<OAuth2AuthorizationServerConfigurerCustomizer> oAuth2AuthorizationServerConfigurerCustomizers,
                                                                                                                                                                                                                                                                                                   List<OAuth2AuthorizationServerExtensionConfigurer<?,org.springframework.security.config.annotation.web.builders.HttpSecurity>> oAuth2AuthorizationServerExtensionConfigurers)

OAuth2AuthorizationServerConfigurer 的适配器

参数:

oAuth2AuthorizationServerConfigurerCustomizers - OAuth2AuthorizationServerConfigurer 的定制器列表

oAuth2AuthorizationServerExtensionConfigurers - oAuth2AuthorizationServerExtensionConfigurer 的配置扩展器列表

返回:

OAuth2AuthorizationServerConfigurerAdapter

oauth2AuthorizationServerSecurityFilterChain

@Bean(name="oauth2AuthorizationServerSecurityFilterChain")
 @Order(value=1)
 @ConditionalOnMissingBean(name="oauth2AuthorizationServerSecurityFilterChain")
public org.springframework.security.web.SecurityFilterChain oauth2AuthorizationServerSecurityFilterChain(OAuth2AuthorizationServerSecurityFilterChainBuilder builder,
                                                                                                                                                                                                                                                                        org.springframework.security.config.annotation.web.builders.HttpSecurity httpSecurity)
                                                                                                                                                                                                                                                                 throws Exception

OAuth2 授权服务器的安全过滤器链，如果和资源服务器共存，需要将其放在资源服务器之前

抛出:

Exception

registeredClientRepository

@Bean
 @ConditionalOnMissingBean
public org.springframework.security.oauth2.server.authorization.client.RegisteredClientRepository registeredClientRepository(org.springframework.jdbc.core.JdbcTemplate jdbcTemplate)

OAuth2 授权服务器中注册的 client 仓库

authorizationService

@Bean
 @ConditionalOnMissingBean
public org.springframework.security.oauth2.server.authorization.OAuth2AuthorizationService authorizationService(org.springframework.jdbc.core.JdbcTemplate jdbcTemplate,
                                                                                                                                                   org.springframework.security.oauth2.server.authorization.client.RegisteredClientRepository registeredClientRepository,
                                                                                                                                                   org.springframework.beans.factory.ObjectProvider<OAuth2AuthorizationObjectMapperCustomizer> objectMapperCustomizerObjectProvider)

OAuth2 授权管理Service

authorizationConsentService

@Bean
 @ConditionalOnMissingBean
public org.springframework.security.oauth2.server.authorization.OAuth2AuthorizationConsentService authorizationConsentService(org.springframework.jdbc.core.JdbcTemplate jdbcTemplate,
                                                                                                                                                                 org.springframework.security.oauth2.server.authorization.client.RegisteredClientRepository registeredClientRepository)

OAuth2AuthorizationConsentService

authorizationServerSettings

@Bean
 @ConditionalOnMissingBean
public org.springframework.security.oauth2.server.authorization.settings.AuthorizationServerSettings authorizationServerSettings()

授权服务器基本端点地址配置

返回:

AuthorizationServerSettings

oAuth2TokenRevocationResponseHandler

@Bean
 @ConditionalOnMissingBean
public OAuth2TokenRevocationResponseHandler oAuth2TokenRevocationResponseHandler(org.springframework.context.ApplicationEventPublisher publisher)

OAuth2 Token 撤销响应处理器

参数:

publisher - 事件发布器

返回:

OAuth2TokenRevocationResponseHandler

passwordEncoder

@Bean
 @ConditionalOnMissingBean
public org.springframework.security.crypto.password.PasswordEncoder passwordEncoder()

密码管理器

oAuth2TokenCustomizer

@Bean
 @ConditionalOnMissingBean(value=org.springframework.security.oauth2.server.authorization.token.OAuth2TokenCustomizer.class)
public org.springframework.security.oauth2.server.authorization.token.OAuth2TokenCustomizer<org.springframework.security.oauth2.server.authorization.token.OAuth2TokenClaimsContext> oAuth2TokenCustomizer()

对于使用不透明令牌的 client，需要存储对应的用户信息，以便在后续的请求中获取用户信息