SpringCloud Alibaba微服务实战十四 - SpringCloud Gateway集成Oauth2(1)

username: xxxxx

password: xxxxxxx

driver-class-name: com.mysql.jdbc.Driver

主要配置oauth2的数据库连接地址

自定义认证接口管理类

在webFlux环境下通过实现 ReactiveAuthenticationManager 接口 自定义认证接口管理，由于我们的token是存在jdbc中所以命名上就叫ReactiveJdbcAuthenticationManager

@Slf4j

public class ReactiveJdbcAuthenticationManager implements ReactiveAuthenticationManager {

private TokenStore tokenStore;

public JdbcAuthenticationManager(TokenStore tokenStore){

this.tokenStore = tokenStore;

}

@Override

public Mono authenticate(Authentication authentication) {

return Mono.justOrEmpty(authentication)

.filter(a -> a instanceof BearerTokenAuthenticationToken)

.cast(BearerTokenAuthenticationToken.class)

.map(BearerTokenAuthenticationToken::getToken)

.flatMap((accessToken ->{

log.info(“accessToken is :{}”,accessToken);

OAuth2AccessToken oAuth2AccessToken = this.tokenStore.readAccessToken(accessToken);

//根据access_token从数据库获取不到OAuth2AccessToken

if(oAuth2AccessToken == null){

return Mono.error(new InvalidTokenException(“invalid access token,please check”));

}else if(oAuth2AccessToken.isExpired()){

return Mono.error(new InvalidTokenException(“access token has expired,please reacquire token”));

}

OAuth2Authentication oAuth2Authentication =this.tokenStore.readAuthentication(accessToken);

if(oAuth2Authentication == null){

return Mono.error(new InvalidTokenException(“Access Token 无效!”));

}else {

return Mono.just(oAuth2Authentication);

}

})).cast(Authentication.class);

}

}

网关层的安全配置

@Configuration

public class SecurityConfig {

private static final String MAX_AGE = “18000L”;

@Autowired

private DataS