spring boot 之 kotlin语言开发，用一次就想放弃Java，爽歪歪~~~

废话少说，上视频

spring boot 之 kotlin用一次就想放弃java，爽歪歪~~~

1、启动入口：

@SpringBootApplication
@EnableDiscoveryClient
class TawuziAuthServerDbApplication

fun main(args: Array<String>) {
    runApplication<TawuziAuthServerDbApplication>(*args)
}

说明

kotlin中的method，语法为

	fun 函数名(参数1，参数2): 返回值 {
	      函数体
	}

是不是比Java简单了

---

2、控制器controller：

@Controller
class MessagesController {

    @ResponseBody
    @GetMapping("/messages")
    fun getMessages(): Array<String>? {
        return arrayOf("Message 1", "Message 2", "Message 3")
    }

    @ResponseBody
    @GetMapping("/user")
    fun user(): Jwt? {
        val principal = SecurityContextHolder.getContext().authentication.principal as Jwt
        println(principal)
        // 查询数据库获取用户信息
        return principal
    }
}

---

3、依赖注入：

类与方法参数均可注入

@Configuration(proxyBeanMethods = false)
class AuthorizationServerConfig(
    @Autowired val passwordEncoder: PasswordEncoder,
    @Value("\${diy.secure.jwk.fpath}") val jwkFile: String,
    @Value("\${diy.secure.jwk.keypass}") val jwkKeypass: String,
    @Value("\${diy.secure.jwk.storepass}") val jwkStorepass: String,
    @Value("\${diy.secure.jwk.alias}") val jwkAlias: String
) {

    @Bean
    @Order(Ordered.HIGHEST_PRECEDENCE)
    @Throws(
        Exception::class
    )
    fun authorizationServerSecurityFilterChain(http: HttpSecurity): SecurityFilterChain {
        val authorizationServerConfigurer = OAuth2AuthorizationServerConfigurer()
        authorizationServerConfigurer
            .authorizationEndpoint { authorizationEndpoint ->
                authorizationEndpoint
                    .consentPage(CUSTOM_CONSENT_PAGE_URI)
            }
            .oidc(Customizer.withDefaults())
        val endpointsMatcher: RequestMatcher = authorizationServerConfigurer.endpointsMatcher
        http
            .csrf().disable().cors().disable()
            .securityMatcher(endpointsMatcher)
            .authorizeHttpRequests {authorize ->
                authorize
//                    .requestMatchers("/auth/.well-known/**").permitAll()
                    .anyRequest().authenticated()
            }
            .csrf {csrf ->
                csrf.ignoringRequestMatchers(endpointsMatcher)
            }
            .exceptionHandling {exceptions ->
                exceptions.authenticationEntryPoint(LoginUrlAuthenticationEntryPoint("/login"))
            }
            .oauth2ResourceServer { obj ->
                obj.jwt()
            }.apply(authorizationServerConfigurer)
        return http.build()
    }

    // @formatter:off
    @Bean
    fun registeredClientRepository(jdbcTemplate: JdbcTemplate?): RegisteredClientRepository {
        val registeredClient: RegisteredClient = RegisteredClient.withId(UUID.randomUUID().toString())
            .clientId("messaging-client")
            .clientSecret("{noop}secret")
            .clientAuthenticationMethod(ClientAuthenticationMethod.CLIENT_SECRET_BASIC)
            .authorizationGrantType(AuthorizationGrantType.AUTHORIZATION_CODE)
            .authorizationGrantType(AuthorizationGrantType.REFRESH_TOKEN)
            .authorizationGrantType(AuthorizationGrantType.CLIENT_CREDENTIALS)
            .redirectUri("http://127.0.0.1:8080/login/oauth2/code/messaging-client-oidc")
            .redirectUri("http://127.0.0.1:8080/authorized")
            .scope(OidcScopes.OPENID)
            .scope(OidcScopes.PROFILE)
            .scope("message.read")
            .scope("message.write")
            .clientSettings(ClientSettings.builder().requireAuthorizationConsent(true).build())
            .build()
        val registeredClient1: RegisteredClient = RegisteredClient.withId(UUID.randomUUID().toString())
            .clientId("messaging-client1")
            .clientSecret(passwordEncoder.encode("secret"))
            .clientAuthenticationMethod(ClientAuthenticationMethod.CLIENT_SECRET_BASIC)
            .authorizationGrantType(AuthorizationGrantType.AUTHORIZATION_CODE)
            .authorizationGrantType(AuthorizationGrantType.REFRESH_TOKEN)
            .authorizationGrantType(AuthorizationGrantType.CLIENT_CREDENTIALS)
            .redirectUri("http://127.0.0.1:8081/login/oauth2/code/messaging-client-oidc1")
            .redirectUri("http://127.0.0.1:8081/authorized")
            .redirectUri("http://127.0.0.1:8081/code")
            .redirectUri("http://127.0.0.1:8081/cb")
            .scope(OidcScopes.OPENID)
            .scope(OidcScopes.PROFILE)
            .scope("message.read")
            .scope("message.write")
            .clientSettings(
                ClientSettings
                    .builder()
                    .requireAuthorizationConsent(false)
                    .build()
            )
            .build()
        val registeredClient4: RegisteredClient = RegisteredClient.withId(UUID.randomUUID().toString())
            .clientId("messaging-client4")
            .clientSecret(passwordEncoder.encode("secret"))
            .clientAuthenticationMethod(ClientAuthenticationMethod.CLIENT_SECRET_BASIC)
            .authorizationGrantType(AuthorizationGrantType.AUTHORIZATION_CODE)
            .authorizationGrantType(AuthorizationGrantType.REFRESH_TOKEN)
            .authorizationGrantType(AuthorizationGrantType.CLIENT_CREDENTIALS)
            .redirectUri("http://127.0.0.1:8084/login/oauth2/code/messaging-client-oidc4")
            .redirectUri("http://127.0.0.1:8084/authorized")
            .redirectUri("http://127.0.0.1:8084/backcb")
            .redirectUri("http://127.0.0.1:8084/cb")
            .redirectUri("http://127.0.0.1:8084/code")
            .scope(OidcScopes.OPENID)
            .scope(OidcScopes.PROFILE)
            .scope("message.read")
            .scope("message.write")
            .clientSettings(
                ClientSettings
                    .builder()
                    .requireAuthorizationConsent(false)
                    .build()
            )
            .build()
        val mobileRegisteredClient4: RegisteredClient = RegisteredClient.withId(UUID.randomUUID().toString())
            .clientId("mobile-messaging-client4")
            .clientSecret(passwordEncoder.encode("secret"))
            .clientAuthenticationMethod(ClientAuthenticationMethod.CLIENT_SECRET_BASIC)
            .authorizationGrantType(AuthorizationGrantType.AUTHORIZATION_CODE)
            .authorizationGrantType(AuthorizationGrantType.REFRESH_TOKEN)
            .authorizationGrantType(AuthorizationGrantType.CLIENT_CREDENTIALS)
            .redirectUri("http://192.168.1.6:8100/login/oauth2/code/mobile-messaging-client-oidc4")
            .redirectUri("http://192.168.1.6:8100/authorized")
            .redirectUri("http://192.168.1.6:8100/backcb")
            .redirectUri("http://192.168.1.6:8100/cb")
            .redirectUri("http://192.168.1.6:8100/code")
            .scope(OidcScopes.OPENID)
            .scope(OidcScopes.PROFILE)
            .scope("message.read")
            .scope("message.write")
            .clientSettings(
                ClientSettings
                    .builder()
                    .requireAuthorizationConsent(false)
                    .build()
            )
            .build()

        val registeredClientLogin: RegisteredClient = RegisteredClient.withId(UUID.randomUUID().toString())
            .clientId("messaging-client-login")
            .clientSecret(passwordEncoder.encode("secret"))
            .clientAuthenticationMethod(ClientAuthenticationMethod.CLIENT_SECRET_BASIC)
            .authorizationGrantType(AuthorizationGrantType.AUTHORIZATION_CODE)
            .authorizationGrantType(AuthorizationGrantType.REFRESH_TOKEN)
            .authorizationGrantType(AuthorizationGrantType.CLIENT_CREDENTIALS)
            .redirectUri("http://127.0.0.1:9010/login/oauth2/code/messaging-client-oidc-login")
            .redirectUri("http://127.0.0.1:9010/authorized")
            .redirectUri("http://127.0.0.1:9010/code")
            .redirectUri("http://127.0.0.1:9010/cb")
            .scope(OidcScopes.OPENID)
            .scope(OidcScopes.PROFILE)
            .scope("message.read")
            .scope("message.write")
            .clientSettings(
                ClientSettings
                    .builder()
                    .requireAuthorizationConsent(false)
                    .build()
            )
            .build()

        val registeredClientRepository = JdbcRegisteredClientRepository(jdbcTemplate)
        return registeredClientRepository
    }

    // @formatter:on
    @Bean
    fun authorizationService(
        jdbcTemplate: JdbcTemplate?,
        registeredClientRepository: RegisteredClientRepository?
    ): OAuth2AuthorizationService {
        return JdbcOAuth2AuthorizationService(jdbcTemplate, registeredClientRepository)
    }

    @Bean
    fun authorizationConsentService(
        jdbcTemplate: JdbcTemplate?,
        registeredClientRepository: RegisteredClientRepository?
    ): OAuth2AuthorizationConsentService {
        return JdbcOAuth2AuthorizationConsentService(jdbcTemplate, registeredClientRepository)
    }

    @Bean
    @Throws(Exception::class)
    fun jwkSource(): JWKSource<SecurityContext> {
        val keyStore = KeyStore.getInstance(
            ClassPathResource(
                jwkFile!!
            ).file, jwkStorepass!!.toCharArray()
        )
        val rsaKey: RSAKey = RSAKey.load(keyStore, jwkAlias, jwkStorepass.toCharArray())
        return JWKSource<SecurityContext> { jwkSelector: JWKSelector, securityContext: com.nimbusds.jose.proc.SecurityContext? ->
            jwkSelector.select(
                JWKSet(rsaKey)
            )
        }
    }

    @Bean
    fun jwtDecoder(jwkSource: JWKSource<com.nimbusds.jose.proc.SecurityContext?>?): JwtDecoder {
        return OAuth2AuthorizationServerConfiguration.jwtDecoder(jwkSource)
    }

    @Bean
    fun authorizationServerSettings(): AuthorizationServerSettings {
        return AuthorizationServerSettings.builder().issuer("http://banang.com:9000").build()
    }

    companion object {
        private const val CUSTOM_CONSENT_PAGE_URI = "/oauth2/consent"
    }
}

---

总结：

kotlin、flutter、Swift语言，差不多算是最近几年新出得语言，
虽然Google、苹果、jetbrains都在强力推荐新语言，
致力于将各自的语言应用到移动、服务器、前端等领域，
但从目前发展来看，kotlin无疑是发展最好的，
已经可以实现在Android、iOS端、web端（替换Java）稳定开发。
如果行业都在跟进的话，不出三年，Java有可能走向衰落。

Stay curious and keep learning。