Início / coding / Perguntas / 79353537
Accepted
PatPanda
Asked: 2025-01-14 05:59:10 +0800 CST

use spring-boot-starter-oauth2-client para passar o token para o Spring Framework release 6 HttpInterface @HttpExchange @GetExchange

  • 772

Estou tentando usar spring-boot-starter-oauth2-client com o novo Spring Framework release 6 HttpInterface

@Configuration
public class RestClientConfig {

    @Bean
    public RestClient restClient(OAuth2AuthorizedClientManager authorizedClientManager, RestClient.Builder restClientBuilder) {
        OAuth2ClientHttpRequestInterceptor interceptor = new OAuth2ClientHttpRequestInterceptor(authorizedClientManager);
        return restClientBuilder
                .requestInterceptor(interceptor)
                .build();
    }

}

@RestController
public class LessonsController {

    private final RestClient restClient;

    public LessonsController(RestClient restClient) {
        this.restClient = restClient;
    }

    @GetMapping("/lessons")
    public String fetchLessons() {
        return restClient.get()
                .uri("https://someserver.om/someprotectedresource")
                .attributes(clientRegistrationId("my-client"))
                .retrieve()
                .body(String.class);
    }
}

spring:
  application:
    name: client-application
  security:
    oauth2:
      client:
        registration:
          my-client:
            provider: my-provider
            client-id: ididid
            client-secret: secretsecret
            authorization-grant-type: client_credentials
            scope: download
        provider:
          my-provider:
            token-uri: https://provider.com/token

O acima está funcionando. Temos a confirmação do provedor de token de que obtivemos o token, assim como do servidor de recursos de que obtivemos o recurso, passando o token. Ambas as duas etapas estão funcionando bem, feliz.

https://www.youtube.com/watch?v=aR580OCEp7w Agora gostaríamos de fazer o mesmo, com a nova versão 6 do Spring Framework HttpInterface

Ao fazer isso:

@Configuration
public class UserClientConfig {

    private final RestClient restClient;

    public UserClientConfig(OAuth2AuthorizedClientManager authorizedClientManager, RestClient.Builder restClientBuilder) {
        OAuth2ClientHttpRequestInterceptor interceptor = new OAuth2ClientHttpRequestInterceptor(authorizedClientManager);
        this.restClient = restClientBuilder
                .requestInterceptor(interceptor)
                .baseUrl("https://host.com")
                .build();
    }

    @Bean
    public UserClient userClient() {
        RestClientAdapter adapter = RestClientAdapter.create(restClient);
        return HttpServiceProxyFactory.builderFor(adapter)
                .build()
                .createClient(UserClient.class);
    }

}

@HttpExchange(
        url = "/v1",
        accept = MediaType.APPLICATION_JSON_VALUE)
public interface UserClient {

    @GetExchange("/protectedresource/full")
    public User getUserById(@RequestParam Map<String, String> key value);

}

    @GetMapping("/lessons")
    public User fetchLessons() {
        return userClient.getUserById(Map.of("foo", "bar"));
    }

Ao usar HttpInterface, isso não funcionaria. O token não é buscado em primeiro lugar. Talvez por causa da falta de .attributes(clientRegistrationId("id")) para @HttpExchange @GetExchange, mas não tenho certeza.

Pergunta: como combinar a interface HTTP com o token spring-boot-starter-oauth2-client?

spring-boot

1 respostas

  1. Best Answer

    Você deve setClientRegistrationIdResolverem sua OAuth2ClientHttpRequestInterceptorinstância:

    final var interceptor = new OAuth2ClientHttpRequestInterceptor(authorizedClientManager);
// Whatever the request, always resolve the my-client registration defined in application.yml
interceptor.setClientRegistrationIdResolver((HttpRequest request) -> "my-client");

    É isso que eu faço em um starter meu que ajuda a autoconfigurar RestCliente WebClientbeans com vários mecanismos de autorização de requisição ( Basic, Bearer, e chave de API) e proxy HTTP, usando apenas propriedades do aplicativo. No seu caso, isso daria:

    spring:
  application:
    name: client-application
  security:
    oauth2:
      client:
        registration:
          my-registration:
            provider: my-provider
            client-id: ididid
            client-secret: secretsecret
            authorization-grant-type: client_credentials
            scope: download
        provider:
          my-provider:
            token-uri: https://provider.com/token
com:
  c4-soft:
    springaddons:
      rest:
        client:
          user-client:
            base-url: https://host.com
            authorization:
              oauth2:
                oauth2-registration-id: my-registration

    @Configuration
public class RestConfiguration {

  @Bean
  // userClient is auto-configured with OAuth2 security by spring-addons-starter-rest
  // using the com.c4-soft.springaddons.rest.client.user-client properties above (the bean name "userClient" is the camelCase transformation of the "user-client" key in application properties)
  UserApi userApi(RestClient userClient) throws Exception {
    return new RestClientHttpExchangeProxyFactoryBean<>(UserApi.class, userClient).getObject();
  }
}

    @RestController
@RequiredArgsConstructor
public class LessonsController {
  // the @HttpExchange proxy defined above (or auto-configured RestClient beans)
  // can then be auto-wired in Spring components
  private final UserApi userApi;
}

    Lindo, não é?

    Observe que, para fins de esclarecimento, renomeei:

    • o registro do cliente OAuth2 de my-clientparamy-registration
    • de @HttpExchangepara ( sendo usado como nome para o proxy configurado internamente UserCliente autoconfigurado )UserApiuserClientRestClient @Bean@HttpExchange
    • 1

relate perguntas