spring oauth2 admin 401错误

spring-oauth2 admin 401错误

没有加@PreAuthorize("…")的默认需要全限

	可能默认权限是 user 而不是 admin

生成RSA令牌demo

@Test
    public void testCreateToken(){
        ClassPathResource resource=new ClassPathResource("changgou68.jks");
        KeyStoreKeyFactory keyStoreKeyFactory=new KeyStoreKeyFactory(resource,"changgou68".toCharArray());
        //获取证书中的一对密钥
        KeyPair keyPair =keyStoreKeyFactory.getKeyPair("changgou","changgou68".toCharArray());
        //私钥
        RSAPrivateKey  privateKey =(RSAPrivateKey)keyPair.getPrivate();
        //创建令牌
        Map<String,Object> payload=new HashMap<>();
        payload.put("nikename","tomcat");
        payload.put("address","sz");
        payload.put("authorities",new String[]{"admin","oauth","user"});

        Jwt jwt = JwtHelper.encode(JSON.toJSONString(payload), new RsaSigner(privateKey));

        String token =jwt.getEncoded();
        System.out.println(token);
    }

令牌加入到header中(注意bearer的空格)

	template.header("Authorization","bearer "+token);

生成RSA密钥

1、找个文件夹 ->cmd

	keytool -genkeypair -alias changgou -keyalg RSA -keypass changgou -keystore changgou.jks -storepass changgou

2、导出public.key

	keytool -list -keystore changgou.jks

3、公钥要在需要请求的微服务下

4、要有config

@Configuration
@EnableResourceServer //开启资源校验
@EnableGlobalMethodSecurity(prePostEnabled = true, securedEnabled = true)//激活方法上的PreAuthorize注解   全局安全校验
public class ResourceServerConfig extends ResourceServerConfigurerAdapter {

    //公钥
    private static final String PUBLIC_KEY = "public.key";

    /***
     * 定义JwtTokenStore
     * @param jwtAccessTokenConverter
     * @return
     */
    @Bean
    public TokenStore tokenStore(JwtAccessTokenConverter jwtAccessTokenConverter) {
        return new JwtTokenStore(jwtAccessTokenConverter);
    }

    /***
     * 定义JJwtAccessTokenConverter
     * @return
     */
    @Bean
    public JwtAccessTokenConverter jwtAccessTokenConverter() {
        JwtAccessTokenConverter converter = new JwtAccessTokenConverter();
        converter.setVerifierKey(getPubKey());
        return converter;
    }
    /**
     * 获取非对称加密公钥 Key
     * @return 公钥 Key
     */
    private String getPubKey() {
        Resource resource = new ClassPathResource(PUBLIC_KEY);
        try {
            InputStreamReader inputStreamReader = new InputStreamReader(resource.getInputStream());
            BufferedReader br = new BufferedReader(inputStreamReader);
            return br.lines().collect(Collectors.joining("\n"));
        } catch (IOException ioe) {
            return null;
        }
    }

    /***
     * Http安全配置，对每个到达系统的http请求链接进行校验
     * @param http
     * @throws Exception
     */
    @Override
    public void configure(HttpSecurity http) throws Exception {
        //所有请求必须认证通过
        http.authorizeRequests()
                //下边的路径放行
                .antMatchers(
                        "/user/add"). //配置地址放行 不用登录可放行
                permitAll()
                .anyRequest().
                authenticated();    //其他地址需要认证授权
    }
}