wiki-files/wg-basic/oauth2.md

title	description	published	date	tags	editor	dateCreated
9.OAuth2单点登录	OAuth2单点登录服务端与客户端配置	true	2021-11-01T02:50:07.132Z	wg-basic	markdown	2021-09-24T06:28:37.207Z

OAuth2认证端

依赖

<dependency>
  <groupId>ink.wgink</groupId>
  <artifactId>login-oauth2-server</artifactId>
  <version>1.0-SNAPSHOT</version>
</dependency>

添加菜单

添加客户端管理 /route/oauth2client/list

OAuth2客户端

注意：OAuth2客户端引入之后，无需再引入其他 login-* 模块 {.is-warning}

依赖

<dependency>
  <groupId>ink.wgink</groupId>
  <artifactId>login-oauth2-client</artifactId>
  <version>1.0-SNAPSHOT</version>
</dependency>

配置

# 安全
security:
  oauth2:
    oauth-server: OAuth2认证服务外网地址
    oauth-logout: ${security.oauth2.oauth-server}/logout?redirect_uri=${server.url}
    client:
      client-id: 由OAuth2认证端提供的ClientId
      client-secret: 由OAuth2认证端提供的ClientSecret
      user-authorization-uri: ${security.oauth2.oauth-server}/oauth2_client/authorize
      access-token-uri: ${security.oauth2.oauth-server}/oauth2_client/token
      grant-type: authorization_code
    resource:
      jwt:
        key-uri: ${security.oauth2.oauth-server}/oauth2_client/token_key
      token-info-uri: ${security.oauth2.oauth-server}/oauth2_client/check_token
      user-info-uri: ${security.oauth2.oauth-server}/user
    authorization:
      check-token-access: ${security.oauth2.oauth-server}/oauth2_client/token_key

api-path:
  user-center: http://127.0.0.1:7011/usercenter