将Spring Security 5 Oauth 2配置为使用access_token uri参数

Question

我正在根据这个例子创建一个应用程序-

背景-

https://github.com/spring-projects/spring-security/blob/e3eaa99ad06769cf44ad3e1249f6398077b90834/oauth2/oauth2-resource-server/src/main/java.org/springframework/security/oauth2/server/resource/web/server/serverbearertokenauthenticationconverter.java#l57

但默认情况下似乎是禁用的-

https://github.com/spring-projects/spring-security/blob/master/oauth2/oauth2-resource-server/src/main/java/org/springframework/security/oauth2/server/resource/web/server/serverbearertokenauthenticationconverter.java#L48

现在这个类在这里直接创建的spring层次结构之外是不可访问的-

https://github.com/spring-projects/spring-security/blob/master/config/src/main/java/org/springframework/security/config/web/server/serverhttpsecurity.java#l955

问题？

Answer 1

现在使用Spring Security5.1.5我们可以这样做-

ServerBearerTokenAuthenticationConverter 
authenticationConverter = new ServerBearerTokenAuthenticationConverter();
authenticationConverter.setAllowUriQueryParameter(true);

http.oauth2ResourceServer().bearerTokenConverter(authenticationConverter).jwt();