Spring Boot OAuth2-无法从令牌获取用户详细信息

Question

我在网上搜索这个问题的解决方案，但没有找到任何有效的解决方案。我正在尝试设置基本的Spring Boot OAuth2授权提供程序和客户端。

我按照官方的Spring Boot指令，创建了Facebook和GitHub的单点登录。然后按照说明创建安全的Spring Boot Web应用程序。

以下是记录的内容：

信息2800---[nio-9999-exec-3]O.S.B.A.S.O.R.UserInfoTokenServices：从：http：//localhost:8080/me获取用户信息

调试2800---[nio-9999-exec-3]O.ss.oauth2.client.oauth2RestTemplate:创建了对http://localhost:8080/Me的GET请求

调试2800---[nio-9999-exec-3]O.ss.oauth2.client.oauth2RestTemplate:获取对http://localhost:8080/Me的请求，结果为200（可以）

信息2800---[nio-9999-exec-3]O.S.B.A.S.O.R.UserInfoTokenServices：无法获取用户详细信息：类org.SpringFramework.web.client.RestClientException,无法提取响应：找不到响应类型[interface java.util.map]和内容类型[text/html；charset=utf-8]]的合适的HttpMessageConverter

这是我的客户端应用程序：

@EnableAutoConfiguration
@Configuration
@EnableOAuth2Sso
@RestController
public class ClientApplication {
    
    @RequestMapping("/")
    public String home(Principal user) {
        return "Hello " + user.getName();
    }

    public static void main(String[] args) {
        SpringApplication.run(ClientApplication.class, args);
    }

}

这是客户端应用程序YML：

server:
  port: 9999
security:
  oauth2:
    client:
      client-id: acme
      client-secret: acmesecret
      access-token-uri: http://localhost:8080/oauth/token
      user-authorization-uri: http://localhost:8080/oauth/authorize
    resource:
      user-info-uri: http://localhost:8080/me

这是我的授权提供程序应用程序：

@SpringBootApplication
public class SecurityApp {

    public static void main(String[] args) {
        SpringApplication.run(SecurityApp.class, args);
    }

}

@Configuration
@EnableWebSecurity
@EnableAuthorizationServer
public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http
            .authorizeRequests()
                .antMatchers("/", "/home").permitAll()
                .anyRequest().authenticated()
                .and()
            .formLogin()
                .loginPage("/login")
                .permitAll()
                .and()
            .logout()
                .permitAll();
    }

    @Autowired
    public void configureGlobal(AuthenticationManagerBuilder auth) throws Exception {
        auth
            .inMemoryAuthentication()
                .withUser("user").password("password").roles("USER");
    }
}

@Configuration
public class MvcConfig extends WebMvcConfigurerAdapter {

    @Override
    public void addViewControllers(ViewControllerRegistry registry) {
        registry.addViewController("/home").setViewName("home");
        registry.addViewController("/").setViewName("home");
        registry.addViewController("/hello").setViewName("hello");
        registry.addViewController("/login").setViewName("login");
    }

}

@RestController
public class Controller {

    @RequestMapping({ "/user", "/me" })
    public Map<String, String> user(Principal principal) {
      Map<String, String> map = new LinkedHashMap<>();
      map.put("name", principal.getName());
      return map;
    }
}

security:
  oauth2:
    client:
      client-id: acme
      client-secret: acmesecret
      scope: read,write
      auto-approve-scopes: '.*'

Answer 1

我解决了问题！我缺少处理用户endpoint（user-info-uri）请求的资源服务器。在Authorization Provider应用程序中添加了以下类：

@Configuration
@EnableResourceServer
public class ResourceServer
        extends ResourceServerConfigurerAdapter {
    @Override
    public void configure(HttpSecurity http) throws Exception {
        http
            .antMatcher("/me")
            .authorizeRequests().anyRequest().authenticated();
    }
}