Skip to content

Spring boot 2 + Spring security 5 实现 SSO + OAuth认证

Notifications You must be signed in to change notification settings

irezm/springboot-oauth

 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

10 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

springboot-oauth

Spring Boot集成Spring security OAuth2事例

  • oauth:认证服务器、资源服务器
  • client-1:资源服务器,与oauth实现SSO
  • client-2:资源服务器,使用RemoteTokenServices进行token验证(无法同时使用SSO和OAuth来保护同一资源)
  • client-3:调用客户端,放开所有访问权限,通过OAuth2RestTemplate调用client-4(client_credentials模式)
  • client-4:资源服务器,自定义ExpressionHandler实现scope匹配,即client的scopes为rea.*,将正常通过hasScopeMatching('read')的鉴权
  • client-5:资源服务器,使用JWT公钥验证token

About

Spring boot 2 + Spring security 5 实现 SSO + OAuth认证

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

  • Java 100.0%