Spring Boot Oauth自定义登录表单

Question

我学习了spring教程“SSOwith OAuth2:Angular JS和spring Security Part V”。

2016-05-18 11:14:53.667 DEBUG 22312---[nio-9999-exec-9]O.security.web.filterchainproxy：/login位于附加筛选器链中14的位置5；正在激发筛选器：“logoutfilter”2016-05-18 11:14:53.667 DEBUG 22312---[nio-9999-exec-9]O.s.s.w.u.matcher.antPathRequestMatcher：请求“get/login”与“post/logout 2016-05-18 11:14:53.667 DEBUG 22312---[nio-9999-exec-9]O.security.web.filterchainproxy：/login”不匹配，位于附加筛选器链中14的位置6；正在激发筛选器：“UsernamePasswordAuthenticationFilter”2016-05-18 11:14:53.667 DEBUG 22312---[nio-9999-exec-9]O.s.s.w.u.matcher.antPathRequestMatcher：请求“Get/login”与“Post/login 2016-05-18 11:14:53.667 DEBUG 22312---[nio-9999-exec-9]O.s.Security.web.FilterChainProxy：/login”在附加筛选器链中14个位置的第7处不匹配；激发筛选器：“DefaultLoginPageGeneratingFilter”2016-05-18 11:14:53.667 DEBUG 22312---[nio-9999-exec-9]W.C.httpsessionSecurityContextRepository：SecurityContext为空或内容为匿名-上下文将不会存储在HttpSession中。

OAuth2ServerConfiguration中的代码：

   @Override
    public void configure(HttpSecurity http) throws Exception {
        http.formLogin().loginPage("/login").permitAll()
            .and().requestMatchers()
                .antMatchers("/login", "/oauth/authorize", "/oauth/confirm_access")
            .and().authorizeRequests()
                .anyRequest().authenticated();
    }

MainAuthserverApplication.java：@ComponentScan@SessionAttributes（“AuthorizationRequest”）@EnableAutoConfiguration()@EnableConfigurationProperties（{authProperties.class}）公共类MainAuthserverApplication扩展WebMvcConfigurerAdapter{

@Override
public void addViewControllers(ViewControllerRegistry registry) {
    registry.addViewController("/login").setViewName("login");
    registry.setOrder(Ordered.HIGHEST_PRECEDENCE);
    registry.addViewController("/oauth/confirm_access").setViewName("authorize");
}

Answer 1

我自己已经修复了这个问题：

看来这两种方法都得在一个档次上：

@Configuration
@Order(-20)
protected static class LoginConfig extends WebSecurityConfigurerAdapter {

    @Autowired
    private AuthenticationManager authenticationManager;

    @Override
    protected void configure(HttpSecurity http) throws Exception {


        // @formatter:off
        http.formLogin().loginPage("/login").permitAll().and().requestMatchers()
            .antMatchers("/login", "/oauth/authorize", "/oauth/confirm_access").and().authorizeRequests()
            .anyRequest().authenticated();
        // @formatter:on
    }

    @Override
    protected void configure(AuthenticationManagerBuilder auth) throws Exception {
        auth.parentAuthenticationManager(authenticationManager);
    }
}