如何通过承载令牌从keydeport programmaticaly（Spring）获取用户名和uuid？

Question

我有一个Spring应用程序，它具有keydeport依赖性。前端发送到我的后端承载令牌，我想使用这个令牌从keydeport获取用户名和他的UUID。

这是我的钥匙斗篷配置。

@Configuration
@ComponentScan(
        basePackageClasses = KeycloakSecurityComponents.class,
        excludeFilters = @ComponentScan.Filter(type = FilterType.REGEX, pattern = "org.keycloak.adapters.springsecurity.management.HttpSessionManager"))
@EnableWebSecurity
class KeycloakConfig extends KeycloakWebSecurityConfigurerAdapter {

    @Bean
    public KeycloakConfigResolver keycloakConfigResolver() {
        return new KeycloakSpringBootConfigResolver();
    }

    @Override
    protected SessionAuthenticationStrategy sessionAuthenticationStrategy() {
        return new NullAuthenticatedSessionStrategy();
    }

    @Override
    protected void configure(AuthenticationManagerBuilder auth) {
        auth.authenticationProvider(keycloakAuthenticationProvider());
    }

    @Override
    protected void configure(HttpSecurity http) throws Exception {
        super.configure(http);
        http
                .csrf().disable()
                .sessionManagement()
                .and()
                .authorizeRequests()
                .antMatchers("/admin/**").hasRole("ADMINS")
                .antMatchers("/user/**").hasRole("USER")
                .anyRequest().permitAll();
    }
}

在这个endpoint中，我得到授权头：

    @PostMapping(value = "/save/{title}")
    @ResponseBody
    public ResponseEntity uploadFile(@RequestParam("file") MultipartFile file, @PathVariable("title") String title, @RequestHeader("Authorization") String authHeader) {
//get user by token?

    }

Answer 1

简而言之，我解析公钥和访问令牌以获得AccessToken类，该类包含您所需要的所有内容（AccessToken.getId（）和AccessToken）。getPreferredUsername（））

@Autowired
private KeycloakSpringBootProperties keycloakProperties;

public String getRealm() {
    return keycloakProperties.getRealm();
}

public String getAuthServerUrl() {
    return keycloakProperties.getAuthServerUrl();
}

public String getRealmUrl() {
    return getAuthServerUrl()
            + "/realms/"
            + getRealm();
}

public String getOpenIdConnectUrl() {
    return getRealmUrl() + "/protocol/openid-connect";
}

public String getOpenIdConnectCertsUrl() {
    return getOpenIdConnectUrl() + "/certs";
}

public AccessToken loadAccessToken(String accessToken) throws TokenNotActiveException, VerificationException, NoSuchFieldException {
    PublicKey publicKey = new KeyCloakRsaKeyLoader().getPublicKeyFromKeyCloak(getOpenIdConnectCertsUrl());
    String realmUrl = keyCloakConnectionProvider.getRealmUrl();
    AccessToken token =
            RSATokenVerifier.verifyToken(
                    accessToken,
                    publicKey,
                    realmUrl,
                    true,
                    true);

    return token;
}