OAuth2.0分布式系统环境搭建( 二 ) _OAuth2.0

然后我们就可以去进行OAuth2.0的相关配置了，方法很简单，只要在配置类上添加@EnableAuthorizationServer注解并让其继承自AuthorizationServerConfigurerAdapter 。最后重写其中的三个configure()方法即可。
@Configuration@EnableAuthorizationServerpublic class AuthorizationServerConfig extends AuthorizationServerConfigurerAdapter {@Autowiredprivate AuthenticationManager authenticationManager;//从WebSecurityConfig中获取的@Autowiredprivate AuthorizationCodeServices authorizationCodeServices;//本类中的，授权码模式需要@Autowiredprivate TokenStore tokenStore;//TokenConfig中的@Autowiredprivate PasswordEncoder passwordEncoder;//从WebSecurityConfig中获取的@Autowiredprivate ClientDetailsService clientDetailsService;//本类中的@Autowiredprivate JwtAccessTokenConverter jwtAccessTokenConverter;//TokenConfig中的//用来配置令牌端点的安全约束@Overridepublic void configure(AuthorizationServerSecurityConfigurer security) throws Exception {security.tokenKeyAccess("permitAll")// /oauth/token_key 提供公有密匙的端点允许任何人访问.checkTokenAccess("permitAll")// /oauth/check_token ：用于资源服务访问的令牌解析端点允许任何人访问.allowFormAuthenticationForClients();//表单认证（申请令牌）}//用来配置客户端详情服务,客户端详情信息在这里进行初始化,//你能够把客户端详情信息写死在这里或者是通过数据库来存储调取详情信息@Overridepublic void configure(ClientDetailsServiceConfigurer clients) throws Exception {clients.withClientDetails(clientDetailsService);}//用来配置令牌（token）的访问端点（url）和令牌服务(token services)@Overridepublic void configure(AuthorizationServerEndpointsConfigurer endpoints) throws Exception {endpoints.authenticationManager(authenticationManager)//认证管理器,密码模式需要.authorizationCodeServices(authorizationCodeServices)//授权码服务,授权码模式需要.tokenServices(tokenService()).allowedTokenEndpointRequestMethods(HttpMethod.POST);//允许post提交}@Beanpublic AuthorizationCodeServices authorizationCodeServices(DataSource dataSource) {//设置授权码模式的授权码存取到数据中return new JdbcAuthorizationCodeServices(dataSource);}//客户端详情服务，从数据库中获取@Beanpublic ClientDetailsService clientDetailsService(DataSource dataSource) {ClientDetailsService clientDetailsService = new JdbcClientDetailsService(dataSource);((JdbcClientDetailsService)clientDetailsService).setPasswordEncoder(passwordEncoder);return clientDetailsService;}//令牌管理服务@Beanpublic AuthorizationServerTokenServices tokenService() {DefaultTokenServices service = new DefaultTokenServices();service.setClientDetailsService(clientDetailsService);//客户端信息服务service.setSupportRefreshToken(true);//支持自动刷新service.setTokenStore(tokenStore);//令牌增强TokenEnhancerChain tokenEnhancerChain = new TokenEnhancerChain();tokenEnhancerChain.setTokenEnhancers(Arrays.asList(jwtAccessTokenConverter));service.setTokenEnhancer(tokenEnhancerChain);service.setAccessTokenValiditySeconds(7200);//令牌默认有效期2小时service.setRefreshTokenValiditySeconds(259200);//刷新令牌默认有效期3天return service;}}现在来解释一下上面代码中的内容