Spring Boot-无效的访问令牌错误 [英] Spring Boot- Invalid access token error
问题描述
我目前正在开发一个简单的 Spring Boot 应用程序,我在其中传递 client_id 和 secret 来获取访问令牌,从而获得刷新和访问令牌.
I'm currently working on a simple Spring Boot application where I pass client_id and secret to get the access token which gets me a refresh and access token.
但是当我尝试使用该令牌访问资源(我的 REST API)时(使用此 URL:curl -H "Authorization: Bearer ead8ba5d-88ad-4531-a821-db08bf25e888" localhost:8081/my-终点),它对我不起作用,并给我以下错误-
But then when I try to access resources(my REST API) using that token (with this URL: curl -H "Authorization: Bearer ead8ba5d-88ad-4531-a821-db08bf25e888" localhost:8081/my-end-point ), it doesn't work for me and gives me following error-
{"error":"invalid_token","error_description":"无效的访问令牌:ead8ba5d-4531-db08bf2fe888"}
这就是我的端点的样子-
This is how my endpoint looks like-
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RequestMethod;
import org.springframework.web.bind.annotation.RestController;
import java.security.Principal;
@RestController
@RequestMapping(path = "/my-end-point")
public class PrincipalResource {
@RequestMapping(method = RequestMethod.POST)
public Principal oauth(Principal principal) {
/*
* Translate the incoming request, which has an access token
* Spring security takes the incoming request and injects the Java Security Principal
* The converter inside Spring Security will handle the to json method which the Spring Security
* Oauth client will know how to read
*
* The @EnableResourceServer on the application entry point is what makes all this magic happen.
* If there is an incoming request token it will check the token validity and handle it accordingly
*
*
*/
return principal;
}
} `
推荐答案
确保在您的 AuthServerOAuth2Configsecurity.allowFormAuthenticationForClients().checkTokenAccess("permitAll()");
@Override
public void configure(AuthorizationServerSecurityConfigurer security) throws Exception {
security.allowFormAuthenticationForClients().checkTokenAccess("permitAll()");
}
并通过向位于以下 URL 的服务器发出 POST 请求来开始生成一些令牌:localhost:yourport/oauth/token
and start generating some tokens by making POST requests to your server at URL:localhost:yourport/oauth/token
例如:
http://localhost:8085/oauth/token?client_secret=secret&client_id=web&grant_type=password&username=kalaiselvan&password=kalaiselvan
它将返回令牌
{
"access_token": "8b816685-b7da-4996-a3e2-ff18b4538a2b",
"token_type": "bearer",
"refresh_token": "f458c09b-f739-4488-be0f-2b0e3c5a62d1",
"expires_in": 637,
"scope": "read"
}
从响应数据中复制access_token并发出新的POST请求
copy the access_token from the response data and make new POST request http://localhost:8085/account
希望对你有帮助
这篇关于Spring Boot-无效的访问令牌错误的文章就介绍到这了,希望我们推荐的答案对大家有所帮助,也希望大家多多支持IT屋!