Spring Boot-无效访问令牌错误

Question

我目前正在开发一个简单的Spring Boot应用程序，在该应用程序中，我传递client_id和secret以获得访问令牌，从而获得一个刷新和访问令牌。

但是，当我尝试使用该令牌访问资源（我的REST API）时（具有以下URL：curl-h“authorization：Bearer ead8ba5d-88ad-4531-a821-db08bf25e888”localhost:8081/my-end-point“），它对我不起作用，并给出以下错误-

{“error”：“invalid_token”,“error_description”：“无效访问令牌:EAD8BA5D-4531-DB08BF2FE888”}

这就是我的终点-

import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RequestMethod;
import org.springframework.web.bind.annotation.RestController;

import java.security.Principal;

@RestController
@RequestMapping(path = "/my-end-point")
public class PrincipalResource {

    @RequestMapping(method = RequestMethod.POST)
    public Principal oauth(Principal principal) {
        /*
         * Translate the incoming request, which has an access token
         * Spring security takes the incoming request and injects the Java Security Principal
         * The converter inside Spring Security will handle the to json method which the Spring Security
         * Oauth client will know how to read
         *
         * The @EnableResourceServer on the application entry point is what makes all this magic happen.
         * If there is an incoming request token it will check the token validity and handle it accordingly
         *
         *
         */


        return principal;
    }
} `

Answer 1

确保在您的AuthServerOAuth2ConfigSecurity.AllowForMauthenticationForClients().CheckTokenAccess（“PermitAll（）”）；中

@Override
public void configure(AuthorizationServerSecurityConfigurer security) throws Exception {     
    security.allowFormAuthenticationForClients().checkTokenAccess("permitAll()");       
}

并通过向URL：localhost：yourport/oauth/token的服务器发出POST请求来开始生成一些令牌

例如：

http://localhost:8085/oauth/token?client_secret=secret&client_id=web&grant_type=password&username=kalaiselvan&password=kalaiselvan

 {
   "access_token": "8b816685-b7da-4996-a3e2-ff18b4538a2b",
   "token_type": "bearer",
   "refresh_token": "f458c09b-f739-4488-be0f-2b0e3c5a62d1",
   "expires_in": 637,
   "scope": "read"
 }