使用google和spring mvc打开id登录

Question

我试图开发一个开放id和谷歌登录的spring mvc项目。我使用的是java配置。xml配置为

 <openid-login user-service-ref="openIdUserService" >
  <attribute-exchange >
<openid-attribute name="email" type="http://schema.openid.net/contact/email"    required="true" />
  <openid-attribute name="firstName" type="http://axschema.org/namePerson/first" required="true" />
  <openid-attribute name="lastName" type="http://axschema.org/namePerson/last" required="true" />
</attribute-exchange>

但不知道java配置中对应的代码是什么。

public class OpenIdUserDetailsService implements UserDetailsService, AuthenticationUserDetailsService {

    @Autowired
    private CustomerRepository userRepository;
    private static final List DEFAULT_AUTHORITIES = AuthorityUtils.createAuthorityList("ROLE_USER");

    @Override
    public UserDetails loadUserByUsername(String id) throws UsernameNotFoundException {
        Customer user = userRepository.findByOpenIdIdentifier(id);

        if (user == null) {
            throw new UsernameNotFoundException(id);
        }
        OpenIdUser openIdUser = new OpenIdUser(user.getOpenIdIdentifier(), DEFAULT_AUTHORITIES);
        openIdUser.setName(user.getFirstname());

        return openIdUser;
    }

    @Override
    public UserDetails loadUserDetails(OpenIDAuthenticationToken token) {
        String id = token.getIdentityUrl();

        Customer user = userRepository.findByOpenIdIdentifier(id);

        if (user != null) {
            OpenIdUser openIdUser = new OpenIdUser(user.getOpenIdIdentifier(), DEFAULT_AUTHORITIES);
            openIdUser.setName(user.getFirstname());

            return openIdUser;
        }

        String firstName = null;
        String lastName = null;
        String fullName = null;

        List attributes = token.getAttributes();

        for (OpenIDAttribute attribute : attributes) {
            String name = attribute.getName();

            if (name.equals("firstname")) {
                firstName = attribute.getValues().get(0);
            } else if (name.equals("lastname")) {
                lastName = attribute.getValues().get(0);
            } else if (name.equals("fullname")) {
                fullName = attribute.getValues().get(0);
            }
        }

        if (fullName == null) {
            StringBuilder fullNameBldr = new StringBuilder();

            if (firstName != null) {
                fullNameBldr.append(firstName);
            }
            if (lastName != null) {
                fullNameBldr.append(" ").append(lastName);
            }

            fullName = fullNameBldr.toString();
        }

        OpenIdUser openIdUser = new OpenIdUser(id, DEFAULT_AUTHORITIES);
        openIdUser.setName(fullName);
        openIdUser.setNewUser(true);

        Customer u = new Customer();
        u.setOpenIdIdentifier(openIdUser.getUsername());
        u.setFirstname(openIdUser.getName());

        userRepository.save(u);

        return openIdUser;
    }
}

Answer 1

OpenIDLoginConfigurer构建器将在Spring Security筛选器链中构建OpenIDAuthenticationFilter和register filter。

OpenIDLoginConfigurer使用attributeExchange参数构建OpenIdAuthenticationFilter，这些参数是使用openid Provider进行身份验证后的回调参数。

为了通过spring security使用open id进行身份验证，请求的url将是“/j_spring_openid_security_check”，OpenIDAuthenticationFilter将通过点击openid提供者进行身份验证来处理此请求。

下面是使用spring Security进行openId登录的简单示例应用程序。