最近有一個項目要用Spring Security做一下OAuth2登錄雀彼,百度了一下發(fā)現(xiàn)都是基于2.x.x做的壤蚜,新版的包基本上都不一樣了,基于Spring Framework 5.x版本的徊哑,截止最新版本的spring-security-oauth2-x是5.0.7.RELEASE版本袜刷。
<dependency>
<groupId>org.springframework.security</groupId>
<artifactId>spring-security-oauth2-client</artifactId>
<version>5.0.7.RELEASE</version>
</dependency>
<dependency>
<groupId>org.springframework.security</groupId>
<artifactId>spring-security-oauth2-core</artifactId>
<version>5.0.7.RELEASE</version>
</dependency>
<dependency>
<groupId>org.springframework.security</groupId>
<artifactId>spring-security-oauth2-jose</artifactId>
<version>5.0.7.RELEASE</version>
</dependency>
如果是用Spring Boot進行配置的話,配置項也改掉了莺丑,需要調整著蟹。
spring.security.oauth2.client.registration.demo.client-name=demo ## registrationId
spring.security.oauth2.client.registration.demo.client-id= ## appkey
spring.security.oauth2.client.registration.demo.client-secret= ## appsecret
spring.security.oauth2.client.registration.demo.authorization-grant-type=authorization_code
spring.security.oauth2.client.registration.demo.client-authentication-method=basic
spring.security.oauth2.client.registration.demo.redirect-uri-template={baseUrl}/login/oauth2/code/{registrationId}
## 范圍
spring.security.oauth2.client.registration.demo.scope=
## 授權鏈接
spring.security.oauth2.client.provider.demo.authorization-uri=
## 這個主要是一個獲取密鑰的URL,主要用來驗證jwt的正確性(也就是簽名)梢莽,非jwt的可以不填
spring.security.oauth2.client.provider.demo.jwk-set-uri=
## 通過code獲取token的鏈接
spring.security.oauth2.client.provider.demo.token-uri=
## 通過token獲取userinfo的鏈接
spring.security.oauth2.client.provider.demo.user-info-uri=
spring.security.oauth2.client.provider.demo.user-name-attribute=
雖然用application.yml進行配置會比較簡潔萧豆,但是idea好像支持的不夠好,對配置項是map的就提示不出來蟹漓,不知道以后會不會支持