wiki-files/wg-basic/oauth2.md

1.5 KiB
Raw Blame History

title description published date tags editor dateCreated
9.OAuth2单点登录 OAuth2单点登录服务端与客户端配置 true 2021-09-24T06:58:35.700Z wg-basic markdown 2021-09-24T06:28:37.207Z

OAuth2认证端

依赖

<dependency>
  <groupId>ink.wgink</groupId>
  <artifactId>login-oauth2-server</artifactId>
  <version>1.0-SNAPSHOT</version>
</dependency>

添加菜单

添加客户端管理 /route/oauth2client/list

OAuth2客户端

注意OAuth2客户端引入之后无需再引入其他 login-* 模块 {.is-warning}

依赖

<dependency>
  <groupId>ink.wgink</groupId>
  <artifactId>login-oauth2-client</artifactId>
  <version>1.0-SNAPSHOT</version>
</dependency>

配置

# 安全
security:
  oauth2:
    oauth-server: OAuth2认证服务外网地址
    oauth-logout: ${security.oauth2.oauth-server}/logout?redirect_uri=${server.url}
    client:
      client-id: 由OAuth2认证端提供的ClientId
      client-secret: 由OAuth2认证端提供的ClientSecret
      user-authorization-uri: ${security.oauth2.oauth-server}/oauth2_client/authorize
      access-token-uri: ${security.oauth2.oauth-server}/oauth2_client/token
      grant-type: authorization_code
    resource:
      jwt:
        key-uri: ${security.oauth2.oauth-server}/oauth2_client/token_key
      token-info-uri: ${security.oauth2.oauth-server}/oauth2_client/check_token
      user-info-uri: ${security.oauth2.oauth-server}/user
    authorization:
      check-token-access: ${security.oauth2.oauth-server}/oauth2_client/token_key