75 lines
3.0 KiB
Java
75 lines
3.0 KiB
Java
package com.cf.file.api.config;
|
||
|
||
import org.springframework.context.annotation.Bean;
|
||
import org.springframework.context.annotation.Configuration;
|
||
import org.springframework.core.io.ClassPathResource;
|
||
import org.springframework.core.io.Resource;
|
||
import org.springframework.security.config.annotation.method.configuration.EnableGlobalMethodSecurity;
|
||
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
|
||
import org.springframework.security.oauth2.config.annotation.web.configuration.EnableResourceServer;
|
||
import org.springframework.security.oauth2.config.annotation.web.configuration.ResourceServerConfigurerAdapter;
|
||
import org.springframework.security.oauth2.provider.token.TokenStore;
|
||
import org.springframework.security.oauth2.provider.token.store.JwtAccessTokenConverter;
|
||
import org.springframework.security.oauth2.provider.token.store.JwtTokenStore;
|
||
|
||
import java.io.BufferedReader;
|
||
import java.io.IOException;
|
||
import java.io.InputStreamReader;
|
||
import java.util.stream.Collectors;
|
||
|
||
/**
|
||
* @author Administrator
|
||
* @version 1.0
|
||
**/
|
||
@Configuration
|
||
@EnableResourceServer
|
||
@EnableGlobalMethodSecurity(prePostEnabled = true, securedEnabled = true)//激活方法上的PreAuthorize注解
|
||
public class ResourceServerConfig extends ResourceServerConfigurerAdapter {
|
||
|
||
//公钥
|
||
private static final String PUBLIC_KEY = "publickey.txt";
|
||
|
||
//定义JwtTokenStore，使用jwt令牌
|
||
@Bean
|
||
public TokenStore tokenStore(JwtAccessTokenConverter jwtAccessTokenConverter) {
|
||
return new JwtTokenStore(jwtAccessTokenConverter);
|
||
}
|
||
|
||
//定义JJwtAccessTokenConverter，使用jwt令牌
|
||
@Bean
|
||
public JwtAccessTokenConverter jwtAccessTokenConverter() {
|
||
JwtAccessTokenConverter converter = new JwtAccessTokenConverter();
|
||
converter.setVerifierKey(getPubKey());
|
||
return converter;
|
||
}
|
||
/**
|
||
* 获取非对称加密公钥 Key
|
||
* @return 公钥 Key
|
||
*/
|
||
private String getPubKey() {
|
||
Resource resource = new ClassPathResource(PUBLIC_KEY);
|
||
try {
|
||
InputStreamReader inputStreamReader = new InputStreamReader(resource.getInputStream());
|
||
BufferedReader br = new BufferedReader(inputStreamReader);
|
||
return br.lines().collect(Collectors.joining("\n"));
|
||
} catch (IOException ioe) {
|
||
return null;
|
||
}
|
||
}
|
||
//Http安全配置，对每个到达系统的http请求链接进行校验
|
||
@Override
|
||
public void configure(HttpSecurity http) throws Exception {
|
||
//所有请求必须认证通过
|
||
http.authorizeRequests()
|
||
//下边的路径放行
|
||
.antMatchers("/v2/api-docs", "/swagger-resources/configuration/ui",
|
||
"/swagger-resources","/swagger-resources/configuration/security",
|
||
"/swagger-ui.html", "/webjars/**", "/file/upload").permitAll()
|
||
.anyRequest().authenticated().and()
|
||
.cors()
|
||
.and()
|
||
.csrf().disable()
|
||
;
|
||
}
|
||
}
|