Oauth 2 jwt enhancer

Auth2 server 自定义 TokenEnhancer

1------------

public class CustomTokenEnhancer implements TokenEnhancer {

    @Override
    public OAuth2AccessToken enhance(OAuth2AccessToken accessToken, OAuth2Authentication authentication) {
        final Map<String, Object> additionalInfo = new HashMap<>();
        additionalInfo.put("organization", "RandomORG");
        ((DefaultOAuth2AccessToken) accessToken).setAdditionalInformation(additionalInfo);


        System.out.println(".........."+accessToken);
        return accessToken;
    }
}

2---------------

    @Bean
    public TokenEnhancer tokenEnhancer() {
        return new CustomTokenEnhancer();
    }

   @Override
    public void configure(AuthorizationServerEndpointsConfigurer endpoints) throws Exception {

        TokenEnhancerChain tokenEnhancerChain = new TokenEnhancerChain();
        tokenEnhancerChain.setTokenEnhancers(
          Arrays.asList(
                tokenEnhancer()
                ,
                accessTokenConverter()
                )
                );

        //
        endpoints.tokenStore(tokenStore())
        .tokenEnhancer(tokenEnhancerChain)
        .authenticationManager(authenticationManager);
    }

3-resource server

@Component
public class MyJwtAccessTokenConverter extends JwtAccessTokenConverter{


    @Override
    public OAuth2Authentication extractAuthentication(Map<String, ?> map) {

        OAuth2Authentication auth2Authentication = getAccessTokenConverter().extractAuthentication(map);
        MyOAuth2Authentication myOAuth2Authentication = new MyOAuth2Authentication(auth2Authentication.getOAuth2Request(),auth2Authentication.getUserAuthentication());

        myOAuth2Authentication.setOrg((String)map.get("organization"));

        //convert to my Authentication, I add some information here..
        return myOAuth2Authentication;
    }
}

    @Bean
    @Primary
    protected JwtAccessTokenConverter jwtTokenEnhancer() {
        MyJwtAccessTokenConverter converter = new MyJwtAccessTokenConverter();

        //option 1
        Resource resource = new ClassPathResource("public.cert");
        String publicKey = null;
        try {
            publicKey = new String(FileCopyUtils.copyToByteArray(resource.getInputStream()));
        } catch (IOException e) {
            throw new RuntimeException(e);
        }
        converter.setVerifierKey(publicKey);

        //option 2
        //converter.setSigningKey("123");

        return converter;
    }

自定义MyOAuth2Authentication保存token添加的额外属性

public class MyOAuth2Authentication extends OAuth2Authentication{

    /**
    *
    */
    private static final long serialVersionUID = 7383757097967991480L;

    private String org;

    public MyOAuth2Authentication(OAuth2Request storedRequest, Authentication userAuthentication) {
        super(storedRequest, userAuthentication);
    }

。。。

END

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!11

通过以下办法，获取的Authentication，就是自定义的MyOAuth2Authentication，这样就可以获取到在token中保存的org属性。

        Authentication auth = SecurityContextHolder.getContext().getAuthentication();
        if(auth instanceof MyOAuth2Authentication){
            System.out.println("/////"+((MyOAuth2Authentication)auth).getOrg());
        }

参考文章 https://github.com/ameizi/spring-boot-oauth2-example

猜你喜欢