对于最新的稳定版本，请使用 Spring Security 6.4.1！spring-doc.cn

OAuth 2.0 客户端

OAuth 2.0 客户端功能为 OAuth 2.0 授权框架中定义的客户端角色提供支持。spring-doc.cn

概括地说，可用的核心功能包括：spring-doc.cn

授权授予支持

客户端身份验证支持

JWT 持有者 spring-doc.cn

HTTP 客户端支持

反应式环境的 WebClient 集成（用于请求受保护的资源）spring-doc.cn

DSL 提供了许多配置选项，用于自定义 OAuth 2.0 客户端使用的核心组件。ServerHttpSecurity.oauth2Client()spring-doc.cn

以下代码显示了 DSL 提供的完整配置选项：ServerHttpSecurity.oauth2Client()spring-doc.cn

OAuth2 客户端配置选项

Javaspring-doc.cn
Kotlinspring-doc.cn

@EnableWebFluxSecurity
public class OAuth2ClientSecurityConfig {

	@Bean
	public SecurityWebFilterChain securityWebFilterChain(ServerHttpSecurity http) {
		http
			.oauth2Client(oauth2 -> oauth2
				.clientRegistrationRepository(this.clientRegistrationRepository())
				.authorizedClientRepository(this.authorizedClientRepository())
				.authorizationRequestRepository(this.authorizationRequestRepository())
				.authenticationConverter(this.authenticationConverter())
				.authenticationManager(this.authenticationManager())
			);

		return http.build();
	}
}

@EnableWebFluxSecurity
class OAuth2ClientSecurityConfig {

    @Bean
    fun securityFilterChain(http: ServerHttpSecurity): SecurityWebFilterChain {
        return http {
            oauth2Client {
                clientRegistrationRepository = clientRegistrationRepository()
                authorizedClientRepository = authorizedClientRepository()
                authorizationRequestRepository = authorizedRequestRepository()
                authenticationConverter = authenticationConverter()
                authenticationManager = authenticationManager()
            }
        }
    }
}

负责与一个或多个（）协作管理 OAuth 2.0 客户端的授权（或重新授权）。ReactiveOAuth2AuthorizedClientManagerReactiveOAuth2AuthorizedClientProviderspring-doc.cn

以下代码显示了如何注册 a 并将其与提供支持、和 authorization 授权类型的复合关联的示例：ReactiveOAuth2AuthorizedClientManager@BeanReactiveOAuth2AuthorizedClientProviderauthorization_coderefresh_tokenclient_credentialspasswordspring-doc.cn

Javaspring-doc.cn
Kotlinspring-doc.cn

@Bean
public ReactiveOAuth2AuthorizedClientManager authorizedClientManager(
		ReactiveClientRegistrationRepository clientRegistrationRepository,
		ServerOAuth2AuthorizedClientRepository authorizedClientRepository) {

	ReactiveOAuth2AuthorizedClientProvider authorizedClientProvider =
			ReactiveOAuth2AuthorizedClientProviderBuilder.builder()
					.authorizationCode()
					.refreshToken()
					.clientCredentials()
					.password()
					.build();

	DefaultReactiveOAuth2AuthorizedClientManager authorizedClientManager =
			new DefaultReactiveOAuth2AuthorizedClientManager(
					clientRegistrationRepository, authorizedClientRepository);
	authorizedClientManager.setAuthorizedClientProvider(authorizedClientProvider);

	return authorizedClientManager;
}

@Bean
fun authorizedClientManager(
        clientRegistrationRepository: ReactiveClientRegistrationRepository,
        authorizedClientRepository: ServerOAuth2AuthorizedClientRepository): ReactiveOAuth2AuthorizedClientManager {
    val authorizedClientProvider: ReactiveOAuth2AuthorizedClientProvider = ReactiveOAuth2AuthorizedClientProviderBuilder.builder()
            .authorizationCode()
            .refreshToken()
            .clientCredentials()
            .password()
            .build()
    val authorizedClientManager = DefaultReactiveOAuth2AuthorizedClientManager(
            clientRegistrationRepository, authorizedClientRepository)
    authorizedClientManager.setAuthorizedClientProvider(authorizedClientProvider)
    return authorizedClientManager
}

OAuth 2.0 客户端

本部分摘要