基于oauth2.0的单点登录

1、在认证中心进行系统注册

这里写图片描述

2、根据注册参数，在系统中设置参数

oauth.oa.key=admineap
oauth.oa.secret=99aaa0bed18a4533bb6ca3fbf91739fd
oauth.oa.scope=billjiang
oauth.oa.authorize_url=http://localhost:8105/oauth/authorize?client_id=%s&response_type=code&redirect_uri=%s&scope=%s
oauth.oa.access_token_url=http://localhost:8105/oauth/token?grant_type=authorization_code
oauth.oa.user_url=http://localhost:8105/oauth/user
oauth.oa.binding_url=http://localhost:8081/AdminEAP-web/oauth/appBinding

3、pom.xml引入scribe

   <dependency>
            <groupId>org.scribe</groupId>
            <artifactId>scribe</artifactId>
             <version>1.3.7</version>
   </dependency>

4、编写相关类

类结构图

5、部分类的方法

OAuthConfig：参数配置入口，以及service的初始化

package com.cnpc.framework.conf;

import com.cnpc.framework.oauth.common.CustomOAuthService;
import com.cnpc.framework.oauth.common.OAuthTypes;
import com.cnpc.framework.oauth.esp.EspApi;
import com.cnpc.framework.oauth.github.GithubApi;
import com.cnpc.framework.utils.PropertiesUtil;
import org.scribe.builder.ServiceBuilder;
import org.springframework.beans.factory.annotation.Value;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;

import java.util.ArrayList;

/**
 * Created by billJiang on 2017/1/15.
 * e-mail:jrn1012@petrochina.com.cn qq:475572229
 */
@Configuration
public class OAuthConfig {
    @Value("${oauth.callback.url}")
    String callback_url;

    /**
     * github配置
     */
    @Value("${oauth.github.key}")
    String github_key;
    @Value("${oauth.github.secret}")
    String github_secret;
    @Value("${oauth.github.state}")
    String github_state;

    @Bean
    public GithubApi githubApi(){
        return new GithubApi(github_state);
    }

    @Bean
    public CustomOAuthService getGithubOAuthService(){
        return (CustomOAuthService)new ServiceBuilder()
                .provider(githubApi())
                .apiKey(github_key)
                .apiSecret(github_secret)
                .callback(String.format(callback_url, OAuthTypes.GITHUB))
                .build();
    }

    //------oa  add by billjiang
    @Value("${oauth.oa.key}")
    String oa_key;
    @Value("${oauth.oa.secret}")
    String oa_secret;
    @Value("${oauth.oa.scope}")
    String oa_scope;
    @Value("${oauth.oa.btnclass}")
    String oa_btnclass;
    @Value("${oauth.oa.authorize_url}")
    String oa_authorize_url;
    @Value("${oauth.oa.access_token_url}")
    String oa_access_token_url;
    @Value("${oauth.oa.user_url}")
    String oa_user_url;
    @Value("${oauth.oa.binding_url}")
    String oa_binding_url;

    @Bean
    public EspApi espApi(){
        return new EspApi(oa_authorize_url,oa_access_token_url,oa_user_url,oa_btnclass);
    }

    @Bean
    public CustomOAuthService getEspOAuthService(){
        return (CustomOAuthService) new ServiceBuilder()
                .provider(espApi())
                .apiKey(oa_key)
                .apiSecret(oa_secret)
                .scope(oa_scope)
                .callback(oa_binding_url)
                .build();
    }

}

CustomOAuthService：服务接口

public interface CustomOAuthService extends OAuthService {
    String getOAuthType();
    String getAuthorizationUrl();
    OAuthUser getOAuthUser(Token accessToken);
    String getUserName(String accessToken);
 }

EspOAuthService：操作服务类

package com.cnpc.framework.oauth.esp;

import com.alibaba.fastjson.JSON;
import com.alibaba.fastjson.JSONObject;
import com.cnpc.framework.oauth.common.CustomOAuthService;
import com.cnpc.framework.oauth.common.OAuthTypes;
import com.cnpc.framework.oauth.entity.OAuthUser;
import org.scribe.model.*;
import org.scribe.oauth.OAuth20ServiceImpl;

/**
 * @author billjiang 475572229@qq.com
 * @create 18-4-6
 */
public class EspOAuthService extends OAuth20ServiceImpl implements CustomOAuthService {

    private String userUrl;
    private String btnClass;
    private final EspApi api;
    private final OAuthConfig config;
    private final String authorizationUrl;

    public EspOAuthService(EspApi api, OAuthConfig config) {
        super(api,config);
        this.api=api;
        this.config=config;
        this.authorizationUrl=this.api.getAuthorizationUrl(config);
        this.userUrl=this.api.getUserUrl();
        this.btnClass=this.api.getBtnClass();
    }


    @Override
    public String getOAuthType() {
        return OAuthTypes.OA;
    }

    @Override
    public String getAuthorizationUrl() {
        return this.authorizationUrl;
    }

    @Override
    public OAuthUser getOAuthUser(Token accessToken) {
        OAuthRequest request = new OAuthRequest(Verb.GET, this.userUrl);
        this.signRequest(accessToken, request);
        Response response = request.send();
        OAuthUser oAuthUser = new OAuthUser();
        oAuthUser.setoAuthType(getOAuthType());
        JSONObject result = JSON.parseObject(response.getBody());
        oAuthUser.setUserName(result.get("name").toString());
        return oAuthUser;
    }

    @Override
    public String getUserName(String accessToken) {
        OAuthRequest request = new OAuthRequest(Verb.GET, this.userUrl);
        request.addQuerystringParameter("access_token", accessToken);
        Response response = request.send();
        JSONObject result = JSON.parseObject(response.getBody());
        return result.get("name").toString();
    }
}

EspAPI：构造API

package com.cnpc.framework.oauth.esp;

import org.scribe.builder.api.DefaultApi20;
import org.scribe.extractors.AccessTokenExtractor;
import org.scribe.extractors.TokenExtractor20Impl;
import org.scribe.model.OAuthConfig;
import org.scribe.model.Verb;
import org.scribe.oauth.OAuthService;
import org.scribe.utils.OAuthEncoder;

/**
 * @author billjiang 475572229@qq.com
 * @create 18-4-6
 */
public class EspApi extends DefaultApi20 {

    private String authorize_url;
    private String access_token_url;
    private String user_url;
    private String btn_class;

    public EspApi(String authorize_url, String access_token_url, String user_url, String btn_class) {
        this.authorize_url = authorize_url;
        this.access_token_url = access_token_url;
        this.user_url = user_url;
        this.btn_class = btn_class;
    }

    @Override
    public String getAccessTokenEndpoint() {
        return this.access_token_url;
    }

    public AccessTokenExtractor getAccessTokenExtractor() {
        return new EspTokenExtractor();
    }

    @Override
    public Verb getAccessTokenVerb() {
        return Verb.POST;
    }

    @Override
    public String getAuthorizationUrl(OAuthConfig config) {
        return String.format(this.authorize_url, config.getApiKey(), OAuthEncoder.encode(config.getCallback()), config
                .getScope());
    }

    @Override
    public OAuthService createService(OAuthConfig config) {
        return new EspOAuthService(this, config);
    }

    public String getUserUrl() {
        return this.user_url;
    }


}

EspTokenExtractor：解析token

public class EspTokenExtractor implements AccessTokenExtractor {
    @Override
    public Token extract(String response) {
        Preconditions.checkEmptyString(response, "Response body is incorrect. Can't extract a token from an empty string");
        Matcher matcher = Pattern.compile("access_token").matcher(response);
        if (matcher.find()) {
            String token = JSONObject.parseObject(response).getString("access_token");
            return new Token(token, "", response);
        } else {
            throw new OAuthException("Response body is incorrect. Can't extract a token from this: '" + response + "'", (Exception)null);
        }
    }
}

6、编写系统绑定和单点登录方法

系统绑定：

 //-------------oa绑定系统,生成token--------------------
    @RequestMapping(value = "/oauth/appBinding")
    @ResponseBody
    public String appBinding(@RequestParam(value = "code") String code, HttpServletRequest request) {
        try {
            CustomOAuthService oAuthService = oAuthServices.getOAuthService(OAuthTypes.OA);
            Token accessToken = oAuthService.getAccessToken(null, new Verifier(code));
            return accessToken.getToken();
        } catch (Exception e) {
            e.printStackTrace();
            return null;
        }
    }

系统登录：

 //-------------oa单点登录系统--------------------
    @RequestMapping(value = "/oauth/appLogin")
    public String appLogin(@RequestParam(value = "token") String access_token, @RequestParam(value = "source") String source) {
        if(!source.equals("oaplus")){
            return LOGIN_PAGE;
        }
        CustomOAuthService oAuthService = oAuthServices.getOAuthService(OAuthTypes.OA);
        String userName = oAuthService.getUserName(access_token);
        userName=getUserNameWithoutDomain(userName);
        //登录系统,绕过密码和验证码
        User user = userService.getUserByLoginName(userName);
        return loginByAuth(user);
    }

    public String getUserNameWithoutDomain(String userName) {
        if (userName.isEmpty())
            return userName;
        userName = userName.replaceAll("\\\\\\\\", "\\\\");
        if (userName.indexOf("\\") > -1)
            userName = userName.split("\\\\")[1].toString();
        return userName;
    }

原文链接：https://blog.csdn.net/jrn1012/article/details/80324995

1、在认证中心进行系统注册

2、 根据注册参数，在系统中设置参数

3、pom.xml引入scribe

4、编写相关类

5、部分类的方法

6、编写系统绑定和单点登录方法

你可能也喜欢

2、根据注册参数，在系统中设置参数