springboot2 oauth2授权重定向匹配版本问题

最新推荐文章于 2024-01-16 16:46:33 发布

食得落

最新推荐文章于 2024-01-16 16:46:33 发布

阅读量5k

点赞数 1

分类专栏：踩过的坑文章标签： At least one redirect_uri must be r

本文链接：https://blog.csdn.net/maple_son/article/details/100006361

版权

踩过的坑专栏收录该内容

3 篇文章 0 订阅

订阅专栏

"At least one redirect_uri must be registered with the client"

从springboot1.x升到2.x 出现如下异常：
原因： `DefaultRedirectResolver.resolveRedirect`

从springboot1.x升到2.x 出现如下异常：

OAuth Error
error="invalid_request", error_description="At least one redirect_uri must be registered with the client."

原因： `DefaultRedirectResolver.resolveRedirect`

springboot 1.x

    public String resolveRedirect(String requestedRedirect, ClientDetails client) throws OAuth2Exception {
        Set<String> authorizedGrantTypes = client.getAuthorizedGrantTypes();
        if (authorizedGrantTypes.isEmpty()) {
            throw new InvalidGrantException("A client must have at least one authorized grant type.");
        } else if (!this.containsRedirectGrantType(authorizedGrantTypes)) {
            throw new InvalidGrantException("A redirect_uri can only be used by implicit or authorization_code grant types.");
        } else {
            Set<String> redirectUris = client.getRegisteredRedirectUri();
            if (redirectUris != null && !redirectUris.isEmpty()) {
                return this.obtainMatchingRedirect(redirectUris, requestedRedirect);
                //为空返回当前URL地址
            } else if (StringUtils.hasText(requestedRedirect)) {	
                return requestedRedirect;
            } else {
                throw new InvalidRequestException("A redirect_uri must be supplied.");
            }
        }
    }

springboot 2.X

	public String resolveRedirect(String requestedRedirect, ClientDetails client) throws OAuth2Exception {

		Set<String> authorizedGrantTypes = client.getAuthorizedGrantTypes();
		if (authorizedGrantTypes.isEmpty()) {
			throw new InvalidGrantException("A client must have at least one authorized grant type.");
		}
		if (!containsRedirectGrantType(authorizedGrantTypes)) {
			throw new InvalidGrantException(
					"A redirect_uri can only be used by implicit or authorization_code grant types.");
		}

		Set<String> registeredRedirectUris = client.getRegisteredRedirectUri();
		//为空未抛出异常
		if (registeredRedirectUris == null || registeredRedirectUris.isEmpty()) {
			throw new InvalidRequestException("At least one redirect_uri must be registered with the client.");
		}
		return obtainMatchingRedirect(registeredRedirectUris, requestedRedirect);
	}

解决方法

1、修改包为2.1.0.RELEASE及以下

		<dependency>
            <groupId>org.springframework.security.oauth</groupId>
            <artifactId>spring-security-oauth2</artifactId>
            <version>2.1.0.RELEASE</version>
        </dependency>

2、接口ClientDetails.class的子类覆盖方法 getRegisteredRedirectUri()

		org.springframework.security.oauth2.provider.client.BaseClientDetails
        baseClientDetails.setClientId("1111111111111");
        baseClientDetails.setClientSecret("2222222222");
        Set<String> redirectUri = new HashSet<>(1);
        redirectUri.add("http://www.baidu.com");
        baseClientDetails.setRegisteredRedirectUri(redirectUri);