Spring Boot整合 Spring Security、 OAuth2

整合Spring Security和OAuth2的核心步骤如下：

1. 添加依赖：

<dependency>
    <groupId>org.springframework.boot</groupId>
    <artifactId>spring-boot-starter-security</artifactId>
</dependency>
<dependency>
    <groupId>org.springframework.security.oauth</groupId>
    <artifactId>spring-security-oauth2-client</artifactId>
</dependency>

2. 配置Security和OAuth2：

import org.springframework.context.annotation.Configuration;
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
import org.springframework.security.oauth2.client.registration.ClientRegistrationRepository;
import org.springframework.security.oauth2.client.web.OAuth2AuthorizationRequestRedirectFilter;
 
@Configuration
public class SecurityConfig extends WebSecurityConfigurerAdapter {
 
    private final ClientRegistrationRepository clientRegistrationRepository;
 
    public SecurityConfig(ClientRegistrationRepository clientRegistrationRepository) {
        this.clientRegistrationRepository = clientRegistrationRepository;
    }
 
    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http
            // 配置登录和注销
            .authorizeRequests()
            .anyRequest().authenticated()
            .and()
            // 配置OAuth2登录重定向过滤器
            .addFilterAfter(new OAuth2AuthorizationRequestRedirectFilter(clientRegistrationRepository), OAuth2AuthorizationRequestRedirectFilter.class);
    }
}

3. 配置OAuth2客户端注册信息：

spring:
  security:
    oauth2:
      client:
        registration:
          my-client:
            client-id: client-id
            client-secret: client-secret
            authorization-grant-type: authorization-code
            redirect-uri: "{baseUrl}/login/oauth2/code/{registrationId}"
            scope: openid, profile, email
        provider:
          my-client:
            authorization-uri: https://your-auth-server/auth
            token-uri: https://your-auth-server/token
            user-info-uri: https://your-auth-server/userinfo
            user-name-attribute: sub

以上代码提供了Spring Security和OAuth2整合的基本框架。具体实现时，你需要根据实际的认证服务器地址、客户端信息等进行相应的配置。