带有OAuth2的Spring Security 5 rest

Question

我想实现一个客户机，它应该简单地用一个OAuth2令牌发送一些rest调用。使用spring-security-oauth，很容易将OAuth2RestTemplate与客户机凭据流一起使用。今天，我看到这些类中的大多数在2.4.0中不被推荐，建议使用Spring Security5。我已经搜索并查看了迁移指南[1]，但我不明白如何执行一些简单的rest调用，该调用使用Spring Security5获取令牌。我想我甚至不确定需要什么样的图书馆。因此，我基本上要寻找的是一种方法，以编程方式（而不是通过属性）向某种rest模板提供客户机ID、客户机秘密和标记endpoint，并向特定的URL发送请求。

--编辑--

 @Test
    public void test() {
        WebClient webClient = getWebClient();
        ResponseSpec retrieve = webClient.get().uri("https://somepath")
                .attributes(ServerOAuth2AuthorizedClientExchangeFilterFunction.clientRegistrationId(REG_ID)).retrieve();
        Flux<String> result = retrieve.bodyToFlux(String.class); // flux makes no sense here, use Mono instead 
        Mono<List<String>> response = result.collectList();
        List<String> block = response.block();
        System.out.print(block);
        System.out.print("debug");
    }

    public WebClient getWebClient() {
        Builder clientRegestrationBuilder = ClientRegistration.withRegistrationId(REG_ID);
        clientRegestrationBuilder.clientId(CLIENT_ID);
        clientRegestrationBuilder.clientSecret(CLIENT_SECRET);
        clientRegestrationBuilder.tokenUri(TOKEN_ENDPOINT);
        clientRegestrationBuilder.authorizationGrantType(AuthorizationGrantType.CLIENT_CREDENTIALS);
        ClientRegistration clientRegistration = clientRegestrationBuilder.build();

        ReactiveClientRegistrationRepository repo = new InMemoryReactiveClientRegistrationRepository(clientRegistration);

        ServerOAuth2AuthorizedClientExchangeFilterFunction oauth = new ServerOAuth2AuthorizedClientExchangeFilterFunction(repo,
                new UnAuthenticatedServerOAuth2AuthorizedClientRepository());
        return WebClient.builder().filter(oauth).build();
    }

敬蒙蒂

[1]https://github.com/spring-projects/spring-security/wiki/oauth-2.0-迁移指南

Answer 1

下面的代码是一个单元测试，它展示了如何以编程方式完成clientregistration。在“真实”的spring场景中，我想ClientRegistration应该作为bean提供，并最终作为列表注入到ReactiveClientRegistrationRepository······

 public void test() {
        WebClient webClient = getWebClient();
        ResponseSpec retrieve = webClient.get().uri("https://somepath")
                .attributes(ServerOAuth2AuthorizedClientExchangeFilterFunction.clientRegistrationId(REG_ID)).retrieve();
        Flux<String> result = retrieve.bodyToFlux(String.class); // flux makes no sense here, use Mono instead 
        Mono<List<String>> response = result.collectList();
        List<String> block = response.block();
        System.out.print(block);
        System.out.print("debug");
    }

    public WebClient getWebClient() {
        Builder clientRegestrationBuilder = ClientRegistration.withRegistrationId(REG_ID);
        clientRegestrationBuilder.clientId(CLIENT_ID);
        clientRegestrationBuilder.clientSecret(CLIENT_SECRET);
        clientRegestrationBuilder.tokenUri(TOKEN_ENDPOINT);
        clientRegestrationBuilder.authorizationGrantType(AuthorizationGrantType.CLIENT_CREDENTIALS);
        ClientRegistration clientRegistration = clientRegestrationBuilder.build();

        ReactiveClientRegistrationRepository repo = new InMemoryReactiveClientRegistrationRepository(clientRegistration);

        ServerOAuth2AuthorizedClientExchangeFilterFunction oauth = new ServerOAuth2AuthorizedClientExchangeFilterFunction(repo,
                new UnAuthenticatedServerOAuth2AuthorizedClientRepository());
        return WebClient.builder().filter(oauth).build();
    }