.................................................................................... 126 第十七章 OAUTH2 集成 ............................................................................................. 第十七章 OAuth2 集成 目前很多开放平台如新浪微博开放平台都在使用提供开放 API 接口供开发者使用，随之带 来了第三方应用要到开放平台进行授权的问题，OAuth 就是干这个的，OAuth2 是 OAuth 协议的下一个版本，相比 OAuth1，OAuth2 整个授权流程更简单安全了，但不兼容 OAuth1， 具 体 可 以 到 OAuth2 官 网 http://oauth.net/2/ net/2/ 查 看 ， OAuth2 协 议 规 范 可 以 参 考 http://tools.ietf.org/html/rfc6749。目前有好多参考实现供选择，可以到其官网查看下载。 本文使用 Apache Oltu，其之前的名字叫 Apache Amber ，是 Java 版的参考实现。使用文档 可参考 https://cwiki.apache.org/confluence/display

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 316 8.4.3. OAuth2. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Shutdown: Graceful Shutdown • Spring Security: Default Security Configuration, Auto-configuration for OAuth2, SAML • Spring Session: Auto-configuration for Spring Session • Spring HATEOAS: Auto-configuration spring-boot-starter-oauth2-authorization- server Starter for using Spring Authorization Server features spring-boot-starter-oauth2-client Starter for using Spring Security’s OAuth2/OpenID Connect client

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 316 8.4.3. OAuth2. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Shutdown: Graceful Shutdown • Spring Security: Default Security Configuration, Auto-configuration for OAuth2, SAML • Spring Session: Auto-configuration for Spring Session • Spring HATEOAS: Auto-configuration spring-boot-starter-oauth2-authorization- server Starter for using Spring Authorization Server features spring-boot-starter-oauth2-client Starter for using Spring Security’s OAuth2/OpenID Connect client

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 316 8.4.3. OAuth2. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Shutdown: Graceful Shutdown • Spring Security: Default Security Configuration, Auto-configuration for OAuth2, SAML • Spring Session: Auto-configuration for Spring Session • Spring HATEOAS: Auto-configuration spring-boot-starter-oauth2-authorization- server Starter for using Spring Authorization Server features spring-boot-starter-oauth2-client Starter for using Spring Security’s OAuth2/OpenID Connect client

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 316 8.4.3. OAuth2. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Shutdown: Graceful Shutdown • Spring Security: Default Security Configuration, Auto-configuration for OAuth2, SAML • Spring Session: Auto-configuration for Spring Session • Spring HATEOAS: Auto-configuration spring-boot-starter-oauth2-authorization- server Starter for using Spring Authorization Server features spring-boot-starter-oauth2-client Starter for using Spring Security’s OAuth2/OpenID Connect client

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 314 8.4.3. OAuth2. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Shutdown: Graceful Shutdown • Spring Security: Default Security Configuration, Auto-configuration for OAuth2, SAML • Spring Session: Auto-configuration for Spring Session • Spring HATEOAS: Auto-configuration spring-boot-starter-oauth2-authorization- server Starter for using Spring Authorization Server features spring-boot-starter-oauth2-client Starter for using Spring Security’s OAuth2/OpenID Connect client

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 316 8.4.3. OAuth2. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Shutdown: Graceful Shutdown • Spring Security: Default Security Configuration, Auto-configuration for OAuth2, SAML • Spring Session: Auto-configuration for Spring Session • Spring HATEOAS: Auto-configuration spring-boot-starter-oauth2-authorization- server Starter for using Spring Authorization Server features spring-boot-starter-oauth2-client Starter for using Spring Security’s OAuth2/OpenID Connect client

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 314 8.4.3. OAuth2. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Shutdown: Graceful Shutdown • Spring Security: Default Security Configuration, Auto-configuration for OAuth2, SAML • Spring Session: Auto-configuration for Spring Session • Spring HATEOAS: Auto-configuration spring-boot-starter-oauth2-authorization- server Starter for using Spring Authorization Server features spring-boot-starter-oauth2-client Starter for using Spring Security’s OAuth2/OpenID Connect client

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 316 8.4.3. OAuth2. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Shutdown: Graceful Shutdown • Spring Security: Default Security Configuration, Auto-configuration for OAuth2, SAML • Spring Session: Auto-configuration for Spring Session • Spring HATEOAS: Auto-configuration spring-boot-starter-oauth2-authorization- server Starter for using Spring Authorization Server features spring-boot-starter-oauth2-client Starter for using Spring Security’s OAuth2/OpenID Connect client

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 316 8.4.3. OAuth2. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Shutdown: Graceful Shutdown • Spring Security: Default Security Configuration, Auto-configuration for OAuth2, SAML • Spring Session: Auto-configuration for Spring Session • Spring HATEOAS: Auto-configuration spring-boot-starter-oauth2-authorization- server Starter for using Spring Authorization Server features spring-boot-starter-oauth2-client Starter for using Spring Security’s OAuth2/OpenID Connect client