Spring Security Oauth2使用JWT生成Token

最新推荐文章于 2025-07-03 20:19:31 发布

Programer Hai

最新推荐文章于 2025-07-03 20:19:31 发布

阅读量7.9k

点赞数 1

CC 4.0 BY-SA版权

本文链接：https://blog.youkuaiyun.com/LiaoHongHB/article/details/84031281

本文介绍了如何在Spring Security OAuth2中使用JWT来生成Token，详细讲解了JWT的优势，如高安全性、可自定义属性和减轻服务器压力。通过改写认证服务器并继承AuthorizationServerConfigurerAdapter，实现了JWT Token的生成，并提供了Postman测试步骤和解析Token的方法。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

转载务必说明出处：https://blog.youkuaiyun.com/LiaoHongHB/article/details/84031281

在我们平时使用oauth2的协议中，生成的token是基于oauth2协议本身的生成策略，如下面的代码（一般在登陆成功的handler中生成token）.：

package com.car.springsecurity.handle;

import com.car.springsecurity.base.RestFulVO;
import com.car.springsecurity.dto.UserToken;
import com.car.springsecurity.entity.User;
import com.car.springsecurity.utils.JwtUtils;
import com.fasterxml.jackson.databind.ObjectMapper;
import org.apache.commons.lang3.StringUtils;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.springframework.beans.BeanUtils;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.security.authentication.BadCredentialsException;
import org.springframework.security.core.Authentication;
import org.springframework.security.oauth2.common.OAuth2AccessToken;
import org.springframework.security.oauth2.common.exceptions.UnapprovedClientAuthenticationException;
import org.springframework.security.oauth2.provider.ClientDetails;
import org.springframework.security.oauth2.provider.ClientDetailsService;
import org.springframework.security.oauth2.provider.OAuth2Authentication;
import org.springframework.security.oauth2.provider.OAuth2Request;
import org.springframework.security.oauth2.provider.TokenRequest;
import org.springframework.security.oauth2.provider.token.AuthorizationServerTokenServices;
import org.springframework.security.web.authentication.SavedRequestAwareAuthenticationSuccessHandler;
import org.springframework.stereotype.Component;
import org.apache.commons.collections.MapUtils;

import javax.annotation.Resource;
import javax.servlet.ServletException;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;
import java.util.Base64;

/**
 * @author liaohong
 * @since 2018/10/29 10:56
 */
@Component("myAuthenticationSuccessHandler")
public clas