有一个spring-web (安全应用)。
配置如下:
security:
oauth2:
client:
registration:
*auth:
provider: *auth
client-name: Login with the Identity Server
client-id: ${app.auth-client.client-id}
client-secret: ${app.auth-client.client-secret}
authorization-grant-type: authorization_code
redirect-uri: ?????
provider:
*auth:
token-uri: ${app.auth-client.server-url}/${app.auth-client.realm}/${app.auth-client.server-url-postfix}/token
authorization-uri: ${app.auth-client.server-url}/${app.auth-client.realm}/${app.auth-client.server-url-postfix}/auth
user-info-uri: ${app.auth-client.server-url}/${app.auth-client.realm}/${app.auth-client.server-url-postfix}/userinfo
jwk-set-uri: ${app.auth-client.server-url}/${app.auth-client.realm}/${app.auth-client.server-url-postfix}/certs主要问题是如何为UI解析重定向uri?有两个应用程序:背面(弹簧)和正面(角度)
它使用redirect-uri:{baseUrl}/login/oauth2/code/{registrationId}
但它只适用于REST-API和后端应用程序。
实际上,我想打开UI页面-如果用户不是auntificated使用back重定向到auth-server。登录后-重定向回( redirect -ui?)转到具有凭据的UI页。
经典的方式。但它不适用于单独的UI。对于测试,我使用keycloak。
发布于 2020-12-02 17:37:29
这里有个诀窍:
public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
...
@Override
protected void configure(HttpSecurity http) throws Exception {
http
...
.oauth2Login()
.successHandler((request, response, authentication) -> response.sendRedirect(clientProperties.getRedirectUriSuccess()))身份验证成功后,需要定义UI的redirect-uri。它与sso配置中的redirect-uri不同。
https://stackoverflow.com/questions/65104795
复制相似问题