无法获取用户详细信息：。。springframework。安全oauth2。客户资源UserRedirectRequiredException

Question

当我在accessTokenUri中提供域名时，它不起作用并报告错误，但当我提供localhost时，它起作用。为什么？

授权服务器Config.java

@Configuration
@EnableAuthorizationServer
@EnableGlobalMethodSecurity(prePostEnabled = true, securedEnabled = true)
public class AuthorizationServerConfig extends AuthorizationServerConfigurerAdapter {

@Autowired
private AuthenticationManager authenticationManager;


@Override
public void configure(AuthorizationServerSecurityConfigurer security) throws Exception {

    security.tokenKeyAccess("permitAll()")
            .checkTokenAccess("isAuthenticated()");
}


@Override
public void configure(ClientDetailsServiceConfigurer clients) throws Exception {
    clients
            .inMemory()
            .withClient("QWE123")
            .secret("abc")
            .authorizedGrantTypes("password")
            .scopes("user_info").accessTokenValiditySeconds(0)
            .autoApprove(true);
}


@Override
public void configure(AuthorizationServerEndpointsConfigurer endpoints) throws Exception {

    endpoints.authenticationManager(authenticationManager);
}
}

@EnableResourceServer
@Configuration
public class ResourceServerConfig extends WebSecurityConfigurerAdapter {

@Override
@Bean
public AuthenticationManager authenticationManagerBean() throws Exception {
    return super.authenticationManagerBean();
}
@Autowired
private UserDetailsService customUserDetailsService;

@Override
protected void configure(HttpSecurity http) throws Exception {

    http.authorizeRequests()
            .antMatchers("/login").permitAll()
            .anyRequest()
            .authenticated()
            .and()
            .formLogin()
            .permitAll();
}

@Override
public void configure(WebSecurity web) throws Exception {
    web.ignoring().antMatchers("/user/**","/swagger-ui.html", "/v2/api-docs", "/swagger-resources/**");
}
@Autowired
public void configureGlobal(AuthenticationManagerBuilder auth) throws Exception {

    auth
            .userDetailsService(customUserDetailsService).passwordEncoder(passwordEncoder());
}

@Bean
public BCryptPasswordEncoder passwordEncoder() {
    return new BCryptPasswordEncoder();
}

}

App.properties
security:
  basic:
    enabled: false
  oauth2:
    resource:
      filter-order: 3

ResourceServerConfig.java

@EnableOAuth2Sso
@Configuration
public class OauthConfig extends WebSecurityConfigurerAdapter{


    @Override
    protected void configure(HttpSecurity http) throws Exception {

        http
                .authorizeRequests()
                .antMatchers("/")
                .permitAll()
                .anyRequest()
                .authenticated();

    }

    @Override
    public void configure(WebSecurity web) throws Exception {
        web.ignoring().antMatchers("/swagger-ui.html", "/v2/api-docs", "/swagger-resources/**");
    }
}

@Configuration
@EnableResourceServer
@EnableGlobalMethodSecurity(prePostEnabled = true)
public class Oauth2ResourceServerConfig extends GlobalMethodSecurityConfiguration {

    @Override
    protected MethodSecurityExpressionHandler createExpressionHandler() {
        return new OAuth2MethodSecurityExpressionHandler();
    }
}

App.properties

security:
  basic:
    enabled: false
  oauth2:
      client:
        clientId: QWE123
        clientSecret: abc
        accessTokenUri: https://example.net/auth/oauth/token
        userAuthorizationUri: https://example.net/auth/oauth/authorize
      resource:
        userInfoUri: https://example.net/auth/logged-in/principal
        filter-order: 3

错误：

2018-09-14 12:00:13.083信息25836---[main]o.s.j.e.a。AnnotationMBeanExporter:Located managed bean'environmentManager'：作为MBean[org.springframework.cloud.context.environment:name=environmentManager，type=environmentManager]在JMX服务器上注册2018-09-14 12:00:13.095信息25836---[main]o.s.j.e.a。AnnotationMBeanExporter:Located managed bean'restartEndpoint'：以MBean[org.springframework.cloud.context.restart:name=restartEndpoint，type=restartEndpoint]2018-09-14 12:00:13.106信息25836-[main]o.s.j.e.a在JMX服务器上注册。AnnotationMBeanExporter:Located managed bean'refreshScope'：以MBean[org.springframework.cloud.context.scope.refresh:name=refreshScope，type=refreshScope]的身份在JMX服务器上注册2018-09-14 12:00:13.116信息25836---[main]o.s.j.e.a。AnnotationMBeanExporter:Located managed bean'configurationPropertiesRebinder'：以MBean[org.springframework.cloud.context.properties:name=configurationPropertiesRebinder，context=35d08e6c，type=configurationPropertiesRebinder]2018-09-14 12:00:13.123信息25836---[main]o.s.j.e.a。AnnotationMBeanExporter:Located managed bean'refreshEndpoint'：作为MBean[org.springframework.cloud.endpoint:name=refreshEndpoint，type=refreshEndpoint]2018-09-14 12:00:13.424信息25836---[main]o.s.c.support在JMX服务器上注册。DefaultLifecycleProcessor:在第0阶段启动bean 2018-09-14 12:00:13.482信息25836---[main]o.s.c.支持。DefaultLifecycleProcessor:在阶段2147483647 2018-09-14 12:00:13.483信息25836---[main]d.s.w.p.DocumentationPluginsBootstrapper:上下文刷新2018-09-14 12:00:13.509信息25836---[main]d.s.w.p.DocumentationPluginsBootstrapper:找到1个自定义文档插件2018-09-14 12:00:13.530信息25836---[br>main]s.d.s.w.s。ApiListingReferenceScanner:扫描api列表参考2018-09-14 12:00:13.870信息25836---[
main]s.b.c.e.t。TomcatEmbeddedServletContainer:Tomcat已在端口上启动：8080（http）2018-09-14 12:00:13.882信息25836---[
main]c.h.dfsc。DfscServiceApplication:在44.8秒内启动DfscServiceApplication（JVM运行45.324）2018-09-14 12:01:52.271信息25836---[nio-8080-exec-1]o.a.c.c.c。[雄猫]。[本地主机]。[/api]：初始化Spring FrameworkServlet“DispatchersServlet”2018-09-14 12:01:52.271信息25836---[nio-8080-exec-1]o.s.web.servlet。DispatcherServlet:FrameworkServlet“DispatcherServlet”：初始化开始2018-09-14 12:01:52.292信息25836---[nio-8080-exec-1]o.s.web.servlet。DispatcherServlet:FrameworkServlet“DispatcherServlet”：初始化在21毫秒内完成2018-09-14 12:01:52.990警告25836---[nio-8080-exec-1]o.s.b.a.s。o、 r.UserInfoTokenServices:无法获取用户详细信息：类组织。springframework。安全oauth2。客户资源UserRedirectRequiredException，需要重定向才能获得用户批准

我在这方面找到了很多，但没有成功，你能帮我吗？

Answer 1

我已经找到了解决办法。它是由于集群而发生的。有多个服务器实例对令牌进行身份验证和授权。当令牌生成请求发生时，它将令牌存储在一个实例上，但当授权请求到来时，它将命中另一个实例。其中未找到令牌并生成异常。在本地主机上，我只有一台服务器，因此工作正常。