SpringBoot+SpringSecurity OAuth2 认证服务搭建实战（七）OAuth2经典场景~授权码模式+自定义登录页面&授权页面

最新推荐文章于 2024-06-29 22:25:20 发布

觉自性本然

最新推荐文章于 2024-06-29 22:25:20 发布

阅读量770

点赞数 16

文章标签： spring boot 后端 java

本文链接：https://blog.csdn.net/gandilong/article/details/140050244

版权

关键代码

@Bean
	@Order(Ordered.HIGHEST_PRECEDENCE)
	public SecurityFilterChain authorizationServerSecurityFilterChain(HttpSecurity http)
			throws Exception {
		
		//OAuth2AuthorizationServerConfiguration.applyDefaultSecurity(http);
		
		OAuth2AuthorizationServerConfigurer authorizationServerConfigurer =	new OAuth2AuthorizationServerConfigurer();
		authorizationServerConfigurer.authorizationEndpoint(authorizationEndpoint ->{
                                       authorizationEndpoint.consentPage("/oauth2/consent");
                     }).oidc(Customizer.withDefaults());	// Enable OpenID Connect 1.0
		RequestMatcher endpointsMatcher = authorizationServerConfigurer.getEndpointsMatcher();
		http
			.securityMatcher(endpointsMatcher)
			.authorizeHttpRequests(authorize ->
				authorize.anyRequest().authenticated()
			)
			.csrf(csrf -> csrf.ignoringRequestMatchers(endpointsMatcher))
			.apply(authorizationServerConfigurer);
        
        http.exceptionHandling((exceptions) -> exceptions
                        .defaultAuthenticationEntryPointFor(//如果没有被认证过登录，则跳转到登录页面
                                new LoginUrlAuthenticationEntryPoint("/login"),
                                new MediaTypeRequestMatcher(MediaType.TEXT_HTML)
                        )