用 spring security oauth2进行用户认证，如何更新Redis中的用户信息

最新推荐文章于 2024-09-09 22:34:06 发布

Lost_abadan

最新推荐文章于 2024-09-09 22:34:06 发布

阅读量8.5k

点赞数

本文链接：https://blog.csdn.net/Lost_abadan/article/details/80521134

版权

本文介绍如何使用Spring Security OAuth2实现用户认证流程。详细解释了如何通过配置获取access_token和refresh_token，并展示了如何自定义认证过程及验证用户信息的具体实现。

摘要由CSDN通过智能技术生成

用 spring security oauth2进行用户认证，首次登录后得到access_token和refresh_token，然后修改SecurityContextHolder.getContext().getAuthentication()中的Principal信息，但没有修改Redis中的数据，

oauth2配置：

@Override
protected void configure(HttpSecurity http) throws Exception
{
    http.requestMatchers().antMatchers(HttpMethod.OPTIONS, "/oauth/token").and().csrf().disable();
}

认证：

@Component
public class PasswdAuthenticationProvider extends AbstractUserDetailsAuthenticationProvider
{
    @Autowired
    private LoginUserDetailsService loginUserDetailsService;


    @Override
    protected void additionalAuthenticationChecks(UserDetails userDetails, UsernamePasswordAuthenticationToken authentication) throws AuthenticationException
    {
  
        String UserName = authentication.getName();
        String Password = (String) authentication.getCredentials();

    }

    @Override
    protected UserDetails retrieveUser(String username, UsernamePasswordAuthenticationToken authentication) throws AuthenticationException
    {
        UserDetails userDetails = null;
        String UserName = authentication.getName();
        String Password = (String) authentication.getCredentials();

        userDetails = (UserDetails) loginUserDetailsService.loadUserByUsername(UserName, Password);
        if (userDetails == null)
        {
            throw new UsernameNotFoundException("用户: " + username + " 验证失败.");
        }
        return userDetails;


    }
}

获取UserDetails：

public static SecuserEntity getUserInfo() {
    SecuserEntity secuserentity = null;
    try {
        Authentication authentication = SecurityContextHolder.getContext().getAuthentication();
        Object principal = authentication == null ? null : authentication.getPrincipal();
        if (principal instanceof SecuserEntity) {
            secuserentity = (SecuserEntity) principal;
        }
    } catch (Exception e) {
    }
    return secuserentity;
}