Spring Cloud(6.3)：搭建OAuth2 Resource Server

最新推荐文章于 2026-04-25 17:30:00 发布

转载最新推荐文章于 2026-04-25 17:30:00 发布 · 1.7k 阅读

0 ·

本内容遵循CC 4.0 BY-SA版权协议

原文链接：http://www.cnblogs.com/storml/p/11246113.html

标签

#java #web.xml

本文介绍了如何在Spring Cloud中搭建OAuth2 Resource Server，包括在web.xml中添加必要的依赖，使用@EnableResourceServer注解，以及配置Eureka Client和Config Client的相关步骤。详细配置过程可以在指定博客文章中找到。

配置web.xml

添加spring-cloud-starter-security，spring-security-oauth2-autoconfigure2个依赖。

<!-- Spring cloud starter: Security -->
<!-- Include: web, actuator, security, zuul, etc. -->
<dependency>
    <groupId>org.springframework.cloud</groupId>
    <artifactId>spring-cloud-starter-security</artifactId>
</dependency>
<!-- Spring Security OAuth2 Autoconfigure (optional in spring-cloud-security after 2.1) -->
<dependency>
    <groupId>org.springframework.security.oauth.boot</groupId>
    <artifactId>spring-security-oauth2-autoconfigure</artifactId>
</dependency>

此外，它还是一个Eureka Client和Config Client，如何配置Eureka Client和Config Client请看前面章节。

配置Application

添加@EnableResourceServer注解，声明为OAuth2 Resource Server。

@SpringBootApplication
@EnableResourceServer // Enable OAuth2 Resource Server
public class ResourceServerApplication {
    public static void main(String[] args) {
        SpringApplication.run(ResourceServerApplication.class, args);
    }
}

配置Configer及参数

ResourceServerConfigurer.java

package com.mytools.config;

import org.springframework.context.annotation.Configuration;
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
import org.springframework.security.oauth2.config.annotation.web.configuration.ResourceServerConfigurerAdapter;

@Configuration
public class ResourceServerConfigurer extends ResourceServerConfigurerAdapter {

    @Override
    public void configure(HttpSecurity http) throws Exception {
        //@formatter:off
        http.authorizeRequests()
                .antMatchers("/structure-search/**", "/data-search/**").hasAnyRole("SQL_USER")
                .anyRequest().authenticated();
        //@formatter:on
    }
}

application.yml

## Security info
security:
  oauth2:
    resource:
      # 定义一个回调URL调用Authorization Server来查看令牌是否有效
      # use zuul to replace 'http://server-auth/server-auth/user'
      userInfoUri: http://localhost:10020/server-zuul/s3/server-auth/user

转载于:https://www.cnblogs.com/storml/p/11246113.html