\uff081\uff09\u65ad\u70b9\u5207\u5165\u70b9<\/p>\n
public class OAuth2LoginAuthenticationFilter extends AbstractAuthenticationProcessingFilter {\n\n public Authentication attemptAuthentication(HttpServletRequest request, HttpServletResponse response)\n throws AuthenticationException, IOException, ServletException {\n ...\n OAuth2LoginAuthenticationToken authenticationResult =\n (OAuth2LoginAuthenticationToken) this.getAuthenticationManager().authenticate(authenticationRequest);\n ...\n }<\/code><\/pre>\n<\/p>\n
\uff082\uff09\u8fdb\u5165this.getAuthenticationManager().authenticate(authenticationRequest)<\/code>\u65b9\u6cd5<\/p>\npublic class ProviderManager implements AuthenticationManager, MessageSourceAware, InitializingBean {\n ...\n public Authentication authenticate(Authentication authentication) throws AuthenticationException {\n ...\n\n while(itor.hasNext()) {\n AuthenticationProvider provider = (AuthenticationProvider) itor.next();\n if (provider.supports(toTest)) {\n if (debug) {\n logger.debug("Authentication attempt using " + provider.getClass().getName());\n }\n\n try {\n result = provider.authenticate(authentication);<\/code><\/pre>\n\uff083\uff09\u8fdb\u5165provider.authenticate(authentication)<\/code>\u65b9\u6cd5<\/p>\npublic class OAuth2LoginAuthenticationProvider implements AuthenticationProvider {\n\n @Override\n public Authentication authenticate(Authentication authentication) throws AuthenticationException {\n ...\n\n OAuth2AccessTokenResponse accessTokenResponse;\n try {\n OAuth2AuthorizationExchangeValidator.validate(\n authorizationCodeAuthentication.getAuthorizationExchange());\n\n accessTokenResponse = this.accessTokenResponseClient.getTokenResponse(\n new OAuth2AuthorizationCodeGrantRequest(\n authorizationCodeAuthentication.getClientRegistration(),\n authorizationCodeAuthentication.getAuthorizationExchange()));\n<\/code><\/pre>\n\uff084\uff09\u8df3\u8f6c\u5230\u81ea\u5b9a\u4e49\u7684OAuth2AccessTokenResponseClient.getTokenResponse<\/code><\/p>\npublic class BigcommerceAuthorizationCodeTokenResponseClient implements OAuth2AccessTokenResponseClient<OAuth2AuthorizationCodeGrantRequest> {\n\n private DefaultAuthorizationCodeTokenResponseClient oAuth2AccessTokenResponseClient;\n ...\n\n @Override\n public OAuth2AccessTokenResponse getTokenResponse(OAuth2AuthorizationCodeGrantRequest authorizationGrantRequest) {\n ....\n\n oAuth2AccessTokenResponseClient.setRequestEntityConverter(new OAuth2AuthorizationCodeGrantRequestEntityConverter() {\n @Override\n public RequestEntity<?> convert(OAuth2AuthorizationCodeGrantRequest authorizationCodeGrantRequest) {\n RequestEntity requestEntity = super.convert(authorizationCodeGrantRequest);\n MultiValueMap<String, String> body = (MultiValueMap<String, String>) requestEntity.getBody();\n body.add("context", shopName);\n body.add("scope", StringUtils.collectionToDelimitedString(currentRegistration.getScopes(), " "));\n return requestEntity;\n }\n });\n\n OAuth2AccessTokenResponse resp = oAuth2AccessTokenResponseClient.getTokenResponse(newGrantReq);<\/code><\/pre>\n\uff085\uff09\u8fdb\u5165oAuth2AccessTokenResponseClient.getTokenResponse(newGrantReq)<\/code>\u65b9\u6cd5<\/p>\npublic final class DefaultAuthorizationCodeTokenResponseClient implements OAuth2AccessTokenResponseClient<OAuth2AuthorizationCodeGrantRequest> {\n\n @Override\n public OAuth2AccessTokenResponse getTokenResponse(OAuth2AuthorizationCodeGrantRequest authorizationCodeGrantRequest) {\n Assert.notNull(authorizationCodeGrantRequest, "authorizationCodeGrantRequest cannot be null");\n\n RequestEntity<?> request = this.requestEntityConverter.convert(authorizationCodeGrantRequest);\n\n ResponseEntity<OAuth2AccessTokenResponse> response;\n try {\n response = this.restOperations.exchange(request, OAuth2AccessTokenResponse.class);<\/code><\/pre>\n\uff086\uff09\u8fdb\u5165this.requestEntityConverter.convert(authorizationCodeGrantRequest)<\/code>\u65b9\u6cd5<\/p>\npublic class OAuth2AuthorizationCodeGrantRequestEntityConverter implements Converter<OAuth2AuthorizationCodeGrantRequest, RequestEntity<?>> {\n\n \/**\n * Returns the {@link RequestEntity} used for the Access Token Request.\n *\n * @param authorizationCodeGrantRequest the authorization code grant request\n * @return the {@link RequestEntity} used for the Access Token Request\n *\/\n @Override\n public RequestEntity<?> convert(OAuth2AuthorizationCodeGrantRequest authorizationCodeGrantRequest) {\n ClientRegistration clientRegistration = authorizationCodeGrantRequest.getClientRegistration();\n\n HttpHeaders headers = OAuth2AuthorizationGrantRequestEntityUtils.getTokenRequestHeaders(clientRegistration);\n MultiValueMap<String, String> formParameters = this.buildFormParameters(authorizationCodeGrantRequest);\n URI uri = UriComponentsBuilder.fromUriString(clientRegistration.getProviderDetails().getTokenUri())\n .build()\n .toUri();\n\n return new RequestEntity<>(formParameters, headers, HttpMethod.POST, uri);\n }\n\n \/**\n * Returns a {@link MultiValueMap} of the form parameters used for the Access Token Request body.\n *\n * @param authorizationCodeGrantRequest the authorization code grant request\n * @return a {@link MultiValueMap} of the form parameters used for the Access Token Request body\n *\/\n private MultiValueMap<String, String> buildFormParameters(OAuth2AuthorizationCodeGrantRequest authorizationCodeGrantRequest) {\n ClientRegistration clientRegistration = authorizationCodeGrantRequest.getClientRegistration();\n OAuth2AuthorizationExchange authorizationExchange = authorizationCodeGrantRequest.getAuthorizationExchange();\n\n MultiValueMap<String, String> formParameters = new LinkedMultiValueMap<>();\n formParameters.add(OAuth2ParameterNames.GRANT_TYPE, authorizationCodeGrantRequest.getGrantType().getValue());\n formParameters.add(OAuth2ParameterNames.CODE, authorizationExchange.getAuthorizationResponse().getCode());\n formParameters.add(OAuth2ParameterNames.REDIRECT_URI, authorizationExchange.getAuthorizationRequest().getRedirectUri());\n if (ClientAuthenticationMethod.POST.equals(clientRegistration.getClientAuthenticationMethod())) {\n formParameters.add(OAuth2ParameterNames.CLIENT_ID, clientRegistration.getClientId());\n formParameters.add(OAuth2ParameterNames.CLIENT_SECRET, clientRegistration.getClientSecret());\n }\n\n return formParameters;\n }\n}<\/code><\/pre>\n\n\u6ce8\u610f\uff1a\u6b63\u56e0\u4e3arequestEntityConverter.convert<\/code>\u5e76\u672a\u8f6c\u6362context<\/code>\u548cscope<\/code>\u5b57\u6bb5\uff0c\u6240\u4ee5\u9700\u8981\u5728\u590d\u5199OAuth2AccessTokenResponseClient<\/code>\u7684getTokenResponse<\/code>\u65b9\u6cd5\u4e2d\u91cd\u65b0\u8bbe\u7f6eoAuth2AccessTokenResponseClient.setRequestEntityConverter<\/code><\/p>\n<\/blockquote>\n\uff087\uff09\u53e6\u5916\uff0c\u81ea\u5b9a\u4e49\u7684BigcommerceOAuth2AccessTokenResponseHttpMessageConverter<\/code>\u8bbe\u7f6e\u7684BigcommerceOAuth2AccessTokenResponseConverter<\/code>\u5982\u679c\u5b9e\u73b0\u7684\u6cdb\u578b\u662fConverter<Map<String, String>, OAuth2AccessTokenResponse><\/code>\uff0c\u5219\u65e0\u6cd5\u8f6c\u6362\u5185\u5d4cJSON\u5bf9\u8c61\uff0c\u5bfc\u81f4Response\u53cd\u5e8f\u5217\u5316\u5931\u8d25\uff0c\u9700\u8981\u8f6c\u6362\u4e3aConverter<Map<String, Object>, OAuth2AccessTokenResponse><\/code><\/p>\n{\n "access_token": "ACCESS_TOKEN",\n "scope": "store_v2_orders",\n "user": {\n "id": 28888,\n "email": "bigcommerce@appblog.cn"\n },\n "context": "stores\/STORE_HASH"\n}<\/code><\/pre>\norg.springframework.security.oauth2.core.OAuth2AuthenticationException: [invalid_token_response] An error occurred while attempting to retrieve the OAuth 2.0 Access Token Response: Error while extracting response for type [class org.springframework.security.oauth2.core.endpoint.OAuth2AccessTokenResponse] and content type [application\/json;charset=utf-8]; nested exception is org.springframework.http.converter.HttpMessageNotReadableException: An error occurred reading the OAuth 2.0 Access Token Response: JSON parse error: Cannot deserialize instance of `java.lang.String` out of START_OBJECT token; nested exception is com.fasterxml.jackson.databind.exc.MismatchedInputException: Cannot deserialize instance of `java.lang.String` out of START_OBJECT token\n at [Source: (PushbackInputStream); line: 1, column: 71] (through reference chain: java.util.LinkedHashMap["user"]); nested exception is org.springframework.http.converter.HttpMessageNotReadableException: JSON parse error: Cannot deserialize instance of `java.lang.String` out of START_OBJECT token; nested exception is com.fasterxml.jackson.databind.exc.MismatchedInputException: Cannot deserialize instance of `java.lang.String` out of START_OBJECT token\n at [Source: (PushbackInputStream); line: 1, column: 71] (through reference chain: java.util.LinkedHashMap["user"])<\/code><\/pre>\npublic class BigcommerceOAuth2AccessTokenResponseHttpMessageConverter extends MyOAuth2AccessTokenResponseHttpMessageConverter {\n\n public CustomBigcommerceOAuth2AccessTokenResponseHttpMessageConverter() {\n super();\n super.setTokenResponseConverter(new BigcommerceOAuth2AccessTokenResponseConverter());\n }\n\n \/**\n * Identical to the OAuth2AccessTokenResponseConverter provided in OAuth2AccessTokenResponseHttpMessageConverter.\n * The major difference is that this converter will not fail if "token_type" is not provided. It defaults to "bearer".\n *\/\n private static class BigcommerceOAuth2AccessTokenResponseConverter implements Converter<Map<String, Object>, OAuth2AccessTokenResponse> {\n private static final Set<String> TOKEN_RESPONSE_PARAMETER_NAMES = Stream.of(\n OAuth2ParameterNames.ACCESS_TOKEN,\n OAuth2ParameterNames.TOKEN_TYPE,\n OAuth2ParameterNames.EXPIRES_IN,\n OAuth2ParameterNames.REFRESH_TOKEN,\n OAuth2ParameterNames.SCOPE).collect(Collectors.toSet());\n\n @Override\n public OAuth2AccessTokenResponse convert(Map<String, Object> tokenResponseParameters) {\n String accessToken = (String) tokenResponseParameters.get(OAuth2ParameterNames.ACCESS_TOKEN);\n\n OAuth2AccessToken.TokenType accessTokenType = null;\n if (OAuth2AccessToken.TokenType.BEARER.getValue().equalsIgnoreCase(\n (String) tokenResponseParameters.get(OAuth2ParameterNames.TOKEN_TYPE))) {\n accessTokenType = OAuth2AccessToken.TokenType.BEARER;\n }\n\n if (accessTokenType == null) {\n accessTokenType = OAuth2AccessToken.TokenType.BEARER;\n }\n\n long expiresIn = 0;\n if (tokenResponseParameters.containsKey(OAuth2ParameterNames.EXPIRES_IN)) {\n try {\n expiresIn = Long.valueOf((String) tokenResponseParameters.get(OAuth2ParameterNames.EXPIRES_IN));\n } catch (NumberFormatException ex) {\n }\n }\n\n Set<String> scopes = Collections.emptySet();\n if (tokenResponseParameters.containsKey(OAuth2ParameterNames.SCOPE)) {\n String scope = (String) tokenResponseParameters.get(OAuth2ParameterNames.SCOPE);\n scopes = Arrays.stream(StringUtils.delimitedListToStringArray(scope, ",")).collect(Collectors.toSet());\n }\n\n String refreshToken = (String) tokenResponseParameters.get(OAuth2ParameterNames.REFRESH_TOKEN);\n\n Map<String, Object> additionalParameters = new LinkedHashMap<>();\n tokenResponseParameters.entrySet().stream()\n .filter(e -> !TOKEN_RESPONSE_PARAMETER_NAMES.contains(e.getKey()))\n .forEach(e -> additionalParameters.put(e.getKey(), e.getValue()));\n\n return OAuth2AccessTokenResponse.withToken(accessToken)\n .tokenType(accessTokenType)\n .expiresIn(expiresIn)\n .scopes(scopes)\n .refreshToken(refreshToken)\n .additionalParameters(additionalParameters)\n .build();\n }\n }\n\n}<\/code><\/pre>\npublic class MyOAuth2AccessTokenResponseHttpMessageConverter extends AbstractHttpMessageConverter<OAuth2AccessTokenResponse> {\n private static final Charset DEFAULT_CHARSET;\n private static final ParameterizedTypeReference<Map<String, Object>> PARAMETERIZED_RESPONSE_TYPE;\n private GenericHttpMessageConverter<Object> jsonMessageConverter = HttpMessageConverters.getJsonMessageConverter();\n protected Converter<Map<String, Object>, OAuth2AccessTokenResponse> tokenResponseConverter = new OAuth2AccessTokenResponseConverter();\n protected Converter<OAuth2AccessTokenResponse, Map<String, Object>> tokenResponseParametersConverter = new OAuth2AccessTokenResponseParametersConverter();\n\n public MyOAuth2AccessTokenResponseHttpMessageConverter() {\n super(DEFAULT_CHARSET, new MediaType[]{MediaType.APPLICATION_JSON, new MediaType("application", "*+json")});\n }\n\n protected boolean supports(Class<?> clazz) {\n return OAuth2AccessTokenResponse.class.isAssignableFrom(clazz);\n }\n\n protected OAuth2AccessTokenResponse readInternal(Class<? extends OAuth2AccessTokenResponse> clazz, HttpInputMessage inputMessage) throws IOException, HttpMessageNotReadableException {\n try {\n Map<String, Object> tokenResponseParameters = (Map)this.jsonMessageConverter.read(PARAMETERIZED_RESPONSE_TYPE.getType(), (Class)null, inputMessage);\n return (OAuth2AccessTokenResponse)this.tokenResponseConverter.convert(tokenResponseParameters);\n } catch (Exception var4) {\n throw new HttpMessageNotReadableException("An error occurred reading the OAuth 2.0 Access Token Response: " + var4.getMessage(), var4, inputMessage);\n }\n }\n\n protected void writeInternal(OAuth2AccessTokenResponse tokenResponse, HttpOutputMessage outputMessage) throws IOException, HttpMessageNotWritableException {\n try {\n Map<String, String> tokenResponseParameters = (Map)this.tokenResponseParametersConverter.convert(tokenResponse);\n this.jsonMessageConverter.write(tokenResponseParameters, PARAMETERIZED_RESPONSE_TYPE.getType(), MediaType.APPLICATION_JSON, outputMessage);\n } catch (Exception var4) {\n throw new HttpMessageNotWritableException("An error occurred writing the OAuth 2.0 Access Token Response: " + var4.getMessage(), var4);\n }\n }\n\n public final void setTokenResponseConverter(Converter<Map<String, Object>, OAuth2AccessTokenResponse> tokenResponseConverter) {\n Assert.notNull(tokenResponseConverter, "tokenResponseConverter cannot be null");\n this.tokenResponseConverter = tokenResponseConverter;\n }\n\n public final void setTokenResponseParametersConverter(Converter<OAuth2AccessTokenResponse, Map<String, Object>> tokenResponseParametersConverter) {\n Assert.notNull(tokenResponseParametersConverter, "tokenResponseParametersConverter cannot be null");\n this.tokenResponseParametersConverter = tokenResponseParametersConverter;\n }\n\n static {\n DEFAULT_CHARSET = StandardCharsets.UTF_8;\n PARAMETERIZED_RESPONSE_TYPE = new ParameterizedTypeReference<Map<String, Object>>() {\n };\n }\n\n private static class OAuth2AccessTokenResponseParametersConverter implements Converter<OAuth2AccessTokenResponse, Map<String, Object>> {\n private OAuth2AccessTokenResponseParametersConverter() {\n }\n\n public Map<String, Object> convert(OAuth2AccessTokenResponse tokenResponse) {\n Map<String, Object> parameters = new HashMap();\n long expiresIn = -1L;\n if (tokenResponse.getAccessToken().getExpiresAt() != null) {\n expiresIn = ChronoUnit.SECONDS.between(Instant.now(), tokenResponse.getAccessToken().getExpiresAt());\n }\n\n parameters.put("access_token", tokenResponse.getAccessToken().getTokenValue());\n parameters.put("token_type", tokenResponse.getAccessToken().getTokenType().getValue());\n parameters.put("expires_in", String.valueOf(expiresIn));\n if (!CollectionUtils.isEmpty(tokenResponse.getAccessToken().getScopes())) {\n parameters.put("scope", StringUtils.collectionToDelimitedString(tokenResponse.getAccessToken().getScopes(), " "));\n }\n\n if (tokenResponse.getRefreshToken() != null) {\n parameters.put("refresh_token", tokenResponse.getRefreshToken().getTokenValue());\n }\n\n if (!CollectionUtils.isEmpty(tokenResponse.getAdditionalParameters())) {\n tokenResponse.getAdditionalParameters().entrySet().stream().forEach((e) -> {\n String var10000 = (String)parameters.put(e.getKey(), e.getValue().toString());\n });\n }\n\n return parameters;\n }\n }\n\n private static class OAuth2AccessTokenResponseConverter implements Converter<Map<String, Object>, OAuth2AccessTokenResponse> {\n private static final Set<String> TOKEN_RESPONSE_PARAMETER_NAMES = (Set) Stream.of("access_token", "token_type", "expires_in", "refresh_token", "scope").collect(Collectors.toSet());\n\n private OAuth2AccessTokenResponseConverter() {\n }\n\n public OAuth2AccessTokenResponse convert(Map<String, Object> tokenResponseParameters) {\n String accessToken = (String)tokenResponseParameters.get("access_token");\n OAuth2AccessToken.TokenType accessTokenType = null;\n if (OAuth2AccessToken.TokenType.BEARER.getValue().equalsIgnoreCase((String)tokenResponseParameters.get("token_type"))) {\n accessTokenType = OAuth2AccessToken.TokenType.BEARER;\n }\n\n long expiresIn = 0L;\n if (tokenResponseParameters.containsKey("expires_in")) {\n try {\n expiresIn = Long.valueOf((String)tokenResponseParameters.get("expires_in"));\n } catch (NumberFormatException var9) {\n }\n }\n\n Set<String> scopes = Collections.emptySet();\n String refreshToken;\n if (tokenResponseParameters.containsKey("scope")) {\n refreshToken = (String)tokenResponseParameters.get("scope");\n scopes = (Set) Arrays.stream(StringUtils.delimitedListToStringArray(refreshToken, " ")).collect(Collectors.toSet());\n }\n\n refreshToken = (String)tokenResponseParameters.get("refresh_token");\n Map<String, Object> additionalParameters = new LinkedHashMap();\n tokenResponseParameters.entrySet().stream().filter((e) -> {\n return !TOKEN_RESPONSE_PARAMETER_NAMES.contains(e.getKey());\n }).forEach((e) -> {\n additionalParameters.put(e.getKey(), e.getValue());\n });\n return OAuth2AccessTokenResponse.withToken(accessToken).tokenType(accessTokenType).expiresIn(expiresIn).scopes(scopes).refreshToken(refreshToken).additionalParameters(additionalParameters).build();\n }\n }\n}<\/code><\/pre>\n","protected":false},"excerpt":{"rendered":"\uff081\uff09\u65ad\u70b9\u5207\u5165\u70b9 public class OAuth2LoginAuthenticationFilter e […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[446,354],"tags":[353],"class_list":["post-1972","post","type-post","status-publish","format-standard","hentry","category-bigcommerce","category-spring-security","tag-oauth2"],"_links":{"self":[{"href":"https:\/\/www.appblog.cn\/index.php\/wp-json\/wp\/v2\/posts\/1972","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.appblog.cn\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.appblog.cn\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.appblog.cn\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.appblog.cn\/index.php\/wp-json\/wp\/v2\/comments?post=1972"}],"version-history":[{"count":0,"href":"https:\/\/www.appblog.cn\/index.php\/wp-json\/wp\/v2\/posts\/1972\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.appblog.cn\/index.php\/wp-json\/wp\/v2\/media?parent=1972"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.appblog.cn\/index.php\/wp-json\/wp\/v2\/categories?post=1972"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.appblog.cn\/index.php\/wp-json\/wp\/v2\/tags?post=1972"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}