SpringSecurity OAuth2自定义ClientDetails

最近在做SpringSecurityOAuth2的自定义ClientDetails目前实现了两种方式

1. 实现 ClientDetailsService 并把值传入BaseClientDetails然后返回

   @Override public ClientDetails loadClientByClientId(String clientId) throws ClientRegistrationException { AuthClient authClient = authClientService.loadClientByClientId(clientId);

   1    BaseClientDetails details = new BaseClientDetails(authClient.getClientId(),
   2            authClient.getResourceIds(),
   3            authClient.getScopes(),
   4            authClient.getAuthorizedGrantTypes(),
   5            authClient.getAuthorities(),
   6            authClient.getRedirectUris());
   7    details.setClientSecret(authClient.getClientSecret());
   8    return details;
   9}
   

2. 先实现ClientDetails 然后再实现 ClientDetailsService

ClientDetails

1public class MyClientDetails implements ClientDetails {
2    private AuthClientDetails client;
3
4    public MyClientDetails(AuthClientDetails client) {
5        this.client = client;
6    }
7
8    public MyClientDetails() {
9
10    }
11
12    /**
13     * The client id.
14     *
15     * @return The client id.
16     */
17    @Override
18    public String getClientId() {
19        return client.getClientId();
20    }
21......

ClientDetailsService

1 @Override
2    public ClientDetails loadClientByClientId(String clientId) throws ClientRegistrationException {
3        AuthClientDetails clientDetails = authClientDetailsMapper.selectClientDetailsByClientId(clientId);
4        if (clientDetails == null) {
5            throw new ClientRegistrationException("该客户端不存在");
6        }
7        MyClientDetails details = new MyClientDetails(clientDetails);
8        return details;
9    }

相对而言，第二种方式灵活性会高很多，在使用过程中遇到一个问题使用最简依赖的自定义ClientDetails 无法返回token，并且返回的是空值。 ClientDetailsUserDetailsService 的loadUserByUsername 方法 报错

经过debug分析，问题出来在了自定义的ClientDetails的权限集合返回值的问。

出错写法

1  @Override
2    public Collection<GrantedAuthority> getAuthorities() {
3        return (client.getAuthorities() != null && client.getAuthorities().trim().length() > 0) ?
4                AuthorityUtils.commaSeparatedStringToAuthorityList(client.getAuthorities()) : null;
5    }

该写法会导致Cannot pass a null GrantedAuthority collection 错误，无法生存token但是不会有任何的报错

正确写法

1@Override
2    public Collection<GrantedAuthority> getAuthorities() {
3        return (client.getAuthorities() != null && client.getAuthorities().trim().length() > 0) ?
4                AuthorityUtils.commaSeparatedStringToAuthorityList(client.getAuthorities()) : Collections.emptyList();
5    }