java 令牌访问_java – Spring OAuth2 – 在令牌存储中手动创建访问令牌

在这里,您的使用案例可能会根据您使用的流程略有不同.这适用于密码授予流程.有一些自定义类,如令牌存储,令牌增强等.但这只是为了我们自己的需要而修改的弹簧类的扩展版本.

HashMap authorizationParameters = new HashMap();

authorizationParameters.put("scope", "read");

authorizationParameters.put("username", "mobile_client");

authorizationParameters.put("client_id", "mobile-client");

authorizationParameters.put("grant", "password");

DefaultAuthorizationRequest authorizationRequest = new DefaultAuthorizationRequest(authorizationParameters);

authorizationRequest.setApproved(true);

Set authorities = new HashSet();

authorities.add(new SimpleGrantedAuthority("ROLE_UNTRUSTED_CLIENT"));

authorizationRequest.setAuthorities(authorities);

HashSet resourceIds = new HashSet();

resourceIds.add("mobile-public");

authorizationRequest.setResourceIds(resourceIds);

// Create principal and auth token

User userPrincipal = new User(user.getUserID(), "", true, true, true, true, authorities);

UsernamePasswordAuthenticationToken authenticationToken = new UsernamePasswordAuthenticationToken(userPrincipal, null, authorities) ;

OAuth2Authentication authenticationRequest = new OAuth2Authentication(authorizationRequest, authenticationToken);

authenticationRequest.setAuthenticated(true);

CustomTokenStore tokenStore = new CustomTokenStore();

// Token Enhancer

CustomTokenEnhancer tokenEnhancer = new CustomTokenEnhancer(user.getUserID());

CustomTokenServices tokenServices = new CustomTokenServices();

tokenServices.setTokenEnhancer(tokenEnhancer);

tokenServices.setSupportRefreshToken(true);

tokenServices.setTokenStore(tokenStore);

OAuth2AccessToken accessToken = tokenServices.createAccessTokenForUser(authenticationRequest, user);