记录webclient库发出的OAuth调用

Question

我有一个使用微服务架构的应用程序，服务受Spring OAuth2客户端凭据授予类型的保护。我们使用spring WebClient和spring OAuth客户端库从一个服务调用另一个服务，因为它透明地处理OAuth凭据的获取。

正如我们所知，Spring（OAuth客户端）会调用授权服务器，在Auth服务器没有令牌或当前令牌过期时，从Auth服务器请求一个新令牌。每当Spring（OAuth客户端）调用OAuth服务器时，我们如何在客户端记录语句？我们希望记录此语句，以查看OAuth客户端库调用授权服务器的频率。

public WebClient webClient()
{
        return WebClient.builder()
                        .apply(filter())
                        .baseUrl("http://localhost:8082/resource")
                        .build();
}
    
public Consumer<Builder> filter()
{
        ServletOAuth2AuthorizedClientExchangeFilterFunction oAuth = 
                new ServletOAuth2AuthorizedClientExchangeFilterFunction(authorizedClientManager);
        oAuth.setDefaultClientRegistrationId("my-client");
        return oAuth.oauth2Configuration();
}

Answer 1

定义向授权服务器发送令牌请求时记录的自定义令牌客户端。

@Slf4j
public class LoggingClientCredentialsTokenResponseClient
    implements OAuth2AccessTokenResponseClient<OAuth2ClientCredentialsGrantRequest> {

  private DefaultClientCredentialsTokenResponseClient delegate =
      new DefaultClientCredentialsTokenResponseClient();

  @Override
  public OAuth2AccessTokenResponse getTokenResponse(
      OAuth2ClientCredentialsGrantRequest clientCredentialsGrantRequest) {

    log.debug("Sending request {}", clientCredentialsGrantRequest);
    var response = delegate.getTokenResponse(clientCredentialsGrantRequest);
    log.debug("Received response {}", response);
    return response;
  }
}

创建使用自定义令牌客户端的授权客户端管理器。

  @Bean
  public OAuth2AuthorizedClientManager authorizedClientManager(
      ClientRegistrationRepository clientRegistrationRepository,
      OAuth2AuthorizedClientService authorizedClientService) {

    var authorizedClientProvider = OAuth2AuthorizedClientProviderBuilder.builder()
        .clientCredentials(builder ->
            builder.accessTokenResponseClient(
                new LoggingClientCredentialsTokenResponseClient()))
        .build();

    var authorizedClientManager =
        new AuthorizedClientServiceOAuth2AuthorizedClientManager(
            clientRegistrationRepository, authorizedClientService);
    authorizedClientManager.setAuthorizedClientProvider(authorizedClientProvider);
    return authorizedClientManager;
  }

创建使用授权客户端管理器的WebClient。

  @Bean
  public WebClient oauth2WebClient(
      WebClient.Builder webClientBuilder,
      OAuth2AuthorizedClientManager authorizedClientManager) {

    var oauth2Filter =
        new ServletOAuth2AuthorizedClientExchangeFilterFunction(authorizedClientManager);
    oauth2Filter.setDefaultClientRegistrationId("my-client");

    return webClientBuilder.apply(oauth2Filter.oauth2Configuration())
        .baseUrl("http://localhost:8082/resource")
        .build();
  }