Spring Boot 实现单点登录的第三种方案！

Spring Boot实现单点登录（SSO）的第三种解决方案是使用OAuth2和OpenID Connect。以下是一个简化的示例：

1. 添加依赖到pom.xml：

<dependency>
    <groupId>org.springframework.boot</groupId>
    <artifactId>spring-boot-starter-oauth2-client</artifactId>
</dependency>
<dependency>
    <groupId>org.springframework.boot</groupId>
    <artifactId>spring-boot-starter-security</artifactId>
</dependency>

2. 配置application.properties或application.yml：

spring.security.oauth2.client.registration.my-client.client-id=client-id
spring.security.oauth2.client.registration.my-client.client-secret=client-secret
spring.security.oauth2.client.registration.my-client.client-name=Client Name
spring.security.oauth2.client.registration.my-client.scope=openid,profile,email
spring.security.oauth2.client.registration.my-client.authorization-grant-type=authorization_code
spring.security.oauth2.client.registration.my-client.redirect-uri=your-redirect-uri
spring.security.oauth2.client.provider.my-provider.authorization-uri=your-authorization-server-uri
spring.security.oauth2.client.provider.my-provider.token-uri=your-token-server-uri
spring.security.oauth2.client.provider.my-provider.user-info-uri=your-user-info-uri
spring.security.oauth2.client.provider.my-provider.jwk-set-uri=your-jwk-set-uri

3. 创建一个SecurityConfig类：

@Configuration
public class SecurityConfig extends WebSecurityConfigurerAdapter {
 
    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http
            .authorizeRequests()
            .anyRequest().authenticated()
            .and()
            .oauth2Login();
    }
}

4. 启动Spring Boot应用并使用OAuth2提供者进行登录。

这个示例展示了如何配置Spring Boot应用以使用OAuth2和OpenID Connect实现单点登录。需要替换配置文件中的client-id、client-secret、URI等为实际的认证服务器信息。这个解决方案适用于需要与外部OAuth2/OpenID Connect认证服务器集成的情况。