gateway oauth2 对称加密_SpringCloud oauth2 jwt gateway demo

@Configuration

@EnableAuthorizationServer

@AllArgsConstructor

public class OAuth2Config extends AuthorizationServerConfigurerAdapter {

@Override

public void configure(ClientDetailsServiceConfigurer clients) throws Exception {

clients.inMemory()

.withClient("user-service")

.secret("123456")

.scopes("service")

.autoApprove(true)

.authorizedGrantTypes("implicit", "refresh_token", "password", "authorization_code")

.accessTokenValiditySeconds(12 * 300);//5min过期

}

@Override

public void configure(AuthorizationServerEndpointsConfigurer endpoints) throws Exception {

endpoints.tokenStore(tokenStore()).tokenEnhancer(jwtTokenEnhancer()).authenticationManager(authenticationManager);

}

@Override

public void configure(AuthorizationServerSecurityConfigurer oauthServer) throws Exception {

oauthServer

.tokenKeyAccess("permitAll()")

.checkTokenAccess("isAuthenticated()").allowFormAuthenticationForClients().passwordEncoder(NoOpPasswordEncoder.getInstance());

/**

* 必须设置allowFormAuthenticationForClients 否则没有办法用postman获取token

* 也需要指定密码加密方式BCryptPasswordEncoder

*/

}

@Autowired

@Qualifier("authenticationManagerBean")

private AuthenticationManager authenticationManager;

@Bean

public TokenStore tokenStore() {

return new JwtTokenStore(jwtTokenEnhancer());

}

@Bean

protected JwtAccessTokenConverter jwtTokenEnhancer() {

JwtAccessTokenConverter jwtAccessTokenConverter = new JwtAccessTokenConverter();

jwtAccessTokenConverter.setKeyPair(keyPair());

return jwtAccessTokenConverter;

}

@Bean

public KeyPair keyPair() {

KeyStoreKeyFactory keyStoreKeyFactory = new KeyStoreKeyFactory(new ClassPathResource("demojwt.jks"), "keystorepass".toCharArray());

return keyStoreKeyFactory.getKeyPair("jwt", "keypairpass".toCharArray());

}