A B C E I O S

A

AnonymousForeverAuthenticationProvider - org.ballcat.springsecurity.authentication中的类

于控制部分接口，需要同时支持匿名登录和授权登录的场景。

AnonymousForeverAuthenticationProvider(List<String>) - 类 的构造器org.ballcat.springsecurity.authentication.AnonymousForeverAuthenticationProvider

AnonymousForeverAuthenticationProvider(String, Object, List<GrantedAuthority>, List<PathPattern>) - 类 的构造器org.ballcat.springsecurity.authentication.AnonymousForeverAuthenticationProvider

authenticate(Authentication) - 类 中的方法org.ballcat.springsecurity.authentication.AnonymousForeverAuthenticationProvider

authenticationEntryPoint() - 类 中的方法org.ballcat.springsecurity.oauth2.server.resource.OAuth2ResourceServerAutoConfiguration

自定义异常处理

B

BallcatOauth2ResourceServerSecurityFilterChainBuilder - org.ballcat.springsecurity.oauth2.server.resource.configurer中的类

资源服务器的配置

BallcatOauth2ResourceServerSecurityFilterChainBuilder() - 类 的构造器org.ballcat.springsecurity.oauth2.server.resource.configurer.BallcatOauth2ResourceServerSecurityFilterChainBuilder

BallcatRemoteOpaqueTokenIntrospector - org.ballcat.springsecurity.oauth2.server.resource.introspection中的类

copy from SpringOpaqueTokenIntrospector，重写了 OAuth2AuthenticatedPrincipal 的构建，保持项目内统一使用 User A Spring implementation of OpaqueTokenIntrospector that verifies and introspects a token using the configured OAuth 2.0 Introspection Endpoint.

BallcatRemoteOpaqueTokenIntrospector(String, String, String) - 类 的构造器org.ballcat.springsecurity.oauth2.server.resource.introspection.BallcatRemoteOpaqueTokenIntrospector

Creates a OpaqueTokenAuthenticationProvider with the provided parameters

BallcatRemoteOpaqueTokenIntrospector(String, RestOperations) - 类 的构造器org.ballcat.springsecurity.oauth2.server.resource.introspection.BallcatRemoteOpaqueTokenIntrospector

Creates a OpaqueTokenAuthenticationProvider with the provided parameters The given RestOperations should perform its own client authentication against the introspection endpoint.

bearerTokenResolver() - 类 中的方法org.ballcat.springsecurity.oauth2.server.resource.OAuth2ResourceServerAutoConfiguration

BearTokenResolve 允许使用 url 传参，方便 ws 连接 ps: 使用 url 传参不安全，待改进

build(HttpSecurity) - 类 中的方法org.ballcat.springsecurity.oauth2.server.resource.configurer.BallcatOauth2ResourceServerSecurityFilterChainBuilder

build(HttpSecurity) - 接口 中的方法org.ballcat.springsecurity.oauth2.server.resource.configurer.Oauth2ResourceServerSecurityFilterChainBuilder

构建 OAuth2 Resource Server 的 SecurityFilterChain

C

commence(HttpServletRequest, HttpServletResponse, AuthenticationException) - 类 中的方法org.ballcat.springsecurity.oauth2.server.resource.web.CustomAuthenticationEntryPoint

createAuthentication(HttpServletRequest) - 类 中的方法org.ballcat.springsecurity.authentication.AnonymousForeverAuthenticationProvider

CustomAuthenticationEntryPoint - org.ballcat.springsecurity.oauth2.server.resource.web中的类

CustomAuthenticationEntryPoint() - 类 的构造器org.ballcat.springsecurity.oauth2.server.resource.web.CustomAuthenticationEntryPoint

customize(HttpSecurity) - 接口 中的方法org.ballcat.springsecurity.oauth2.server.resource.configurer.OAuth2ResourceServerConfigurerCustomizer

对资源服务器配置进行自定义

customPermissionEvaluator() - 类 中的方法org.ballcat.springsecurity.oauth2.server.resource.OAuth2ResourceServerAutoConfiguration

自定义的权限判断组件

E

EnableOauth2ResourceServer - org.ballcat.springsecurity.oauth2.server.resource.annotation中的注释类型

开启 Oauth2 资源服务器

I

introspect(String) - 类 中的方法org.ballcat.springsecurity.oauth2.server.resource.introspection.BallcatRemoteOpaqueTokenIntrospector

introspect(String) - 类 中的方法org.ballcat.springsecurity.oauth2.server.resource.introspection.SpringAuthorizationServerSharedStoredOpaqueTokenIntrospector

O

OAUTH2_RESOURCE_SERVER_SECURITY_FILTER_CHAIN_BEAN_NAME - 类 中的静态变量org.ballcat.springsecurity.oauth2.server.resource.OAuth2ResourceServerAutoConfiguration

OAuth2ResourceServerAutoConfiguration - org.ballcat.springsecurity.oauth2.server.resource中的类

资源服务需要的一些 bean 配置

OAuth2ResourceServerAutoConfiguration() - 类 的构造器org.ballcat.springsecurity.oauth2.server.resource.OAuth2ResourceServerAutoConfiguration

OAuth2ResourceServerConfigurerCustomizer - org.ballcat.springsecurity.oauth2.server.resource.configurer中的接口

对 Ballcat 默认的配置的 OAuth2ResourceServerConfigurer 进行自定义处理

OAuth2ResourceServerExtensionConfigurer<H extends org.springframework.security.config.annotation.web.HttpSecurityBuilder<H>> - org.ballcat.springsecurity.oauth2.server.resource.configurer中的类

OAuth2资源服务器的扩展配置

OAuth2ResourceServerExtensionConfigurer() - 类 的构造器org.ballcat.springsecurity.oauth2.server.resource.configurer.OAuth2ResourceServerExtensionConfigurer

OAuth2ResourceServerProperties - org.ballcat.springsecurity.oauth2.server.resource.properties中的类

资源服务器的配置文件，用于配置 token 鉴定方式。

OAuth2ResourceServerProperties() - 类 的构造器org.ballcat.springsecurity.oauth2.server.resource.properties.OAuth2ResourceServerProperties

OAuth2ResourceServerProperties.Opaquetoken - org.ballcat.springsecurity.oauth2.server.resource.properties中的类

oauth2ResourceServerSecurityFilterChain(Oauth2ResourceServerSecurityFilterChainBuilder, HttpSecurity) - 类 中的方法org.ballcat.springsecurity.oauth2.server.resource.OAuth2ResourceServerAutoConfiguration

OAuth2 授权服务器的安全过滤器链，如果和资源服务器共存，需要将其放在资源服务器之前

Oauth2ResourceServerSecurityFilterChainBuilder - org.ballcat.springsecurity.oauth2.server.resource.configurer中的接口

OAuth2 Resource Server 的 SecurityFilterChain 构造器

oauth2ResourceServerSecurityFilterChainBuilder(OAuth2ResourceServerProperties, AuthenticationEntryPoint, BearerTokenResolver, ObjectProvider<List<OAuth2ResourceServerConfigurerCustomizer>>, ObjectProvider<List<OAuth2ResourceServerExtensionConfigurer<HttpSecurity>>>) - 类 中的方法org.ballcat.springsecurity.oauth2.server.resource.OAuth2ResourceServerAutoConfiguration

资源服务器的过滤器链构建器

Opaquetoken() - 类 的构造器org.ballcat.springsecurity.oauth2.server.resource.properties.OAuth2ResourceServerProperties.Opaquetoken

opaqueTokenAuthenticationProvider(OpaqueTokenIntrospector) - 类 中的方法org.ballcat.springsecurity.oauth2.server.resource.OAuth2ResourceServerAutoConfiguration

spring-security 5.x 中开启资源服务器功能，需要的不透明令牌的支持

opaqueTokenIntrospector(OAuth2ResourceServerProperties) - 类 中的方法org.ballcat.springsecurity.oauth2.server.resource.OAuth2ResourceServerAutoConfiguration

当资源服务器和授权服务器的 token 存储无法共享时，通过远程调用的方式，向授权服务鉴定 token，并同时获取对应的授权信息

org.ballcat.springsecurity.authentication - 程序包 org.ballcat.springsecurity.authentication

org.ballcat.springsecurity.oauth2.server.resource - 程序包 org.ballcat.springsecurity.oauth2.server.resource

org.ballcat.springsecurity.oauth2.server.resource.annotation - 程序包 org.ballcat.springsecurity.oauth2.server.resource.annotation

org.ballcat.springsecurity.oauth2.server.resource.configurer - 程序包 org.ballcat.springsecurity.oauth2.server.resource.configurer

org.ballcat.springsecurity.oauth2.server.resource.introspection - 程序包 org.ballcat.springsecurity.oauth2.server.resource.introspection

org.ballcat.springsecurity.oauth2.server.resource.properties - 程序包 org.ballcat.springsecurity.oauth2.server.resource.properties

org.ballcat.springsecurity.oauth2.server.resource.web - 程序包 org.ballcat.springsecurity.oauth2.server.resource.web

S

setAuthenticationDetailsSource(AuthenticationDetailsSource<HttpServletRequest, ?>) - 类 中的方法org.ballcat.springsecurity.authentication.AnonymousForeverAuthenticationProvider

setRequestEntityConverter(Converter<String, RequestEntity<?>>) - 类 中的方法org.ballcat.springsecurity.oauth2.server.resource.introspection.BallcatRemoteOpaqueTokenIntrospector

Sets the Converter used for converting the OAuth 2.0 access token to a RequestEntity representation of the OAuth 2.0 token introspection request.

SpringAuthorizationServerSharedStoredOpaqueTokenIntrospector - org.ballcat.springsecurity.oauth2.server.resource.introspection中的类

共享存储的不透明令牌的处理器 当资源服务器与授权服务器共享了 TokenStore, 比如使用 RedisTokenStore 时共享了 redis，或者 jdbcTokenStore 时，共享了数据库。

SpringAuthorizationServerSharedStoredOpaqueTokenIntrospector(OAuth2AuthorizationService) - 类 的构造器org.ballcat.springsecurity.oauth2.server.resource.introspection.SpringAuthorizationServerSharedStoredOpaqueTokenIntrospector

supports(Class<?>) - 类 中的方法org.ballcat.springsecurity.authentication.AnonymousForeverAuthenticationProvider

A B C E I O S