spring cloud oauth2授權服務 clientDetails配置源碼

clientDetails

@EnableAuthorizationServer

...
@Import({... AuthorizationServerSecurityConfiguration.class})
...

AuthorizationServerSecurityConfiguration

...
// 引入clientDetails配置
@Import({ ClientDetailsServiceConfiguration.class... })
...
// 注入客制實現的AuthorizationServerConfigurerAdapter
@Autowired 
private List<AuthorizationServerConfigurer> configurers = Collections.emptyList();
@Autowired
private ClientDetailsService clientDetailsService;
@Autowired
public void configure(ClientDetailsServiceConfigurer clientDetails) throws Exception {
	for (AuthorizationServerConfigurer configurer : configurers) {
		configurer.configure(clientDetails); // 此處完成clientDetailsService配置
	}
}
...

ClientDetailsServiceConfiguration

@Configuration
public class ClientDetailsServiceConfiguration {

	@SuppressWarnings("rawtypes")
	private ClientDetailsServiceConfigurer configurer = new ClientDetailsServiceConfigurer(new ClientDetailsServiceBuilder());
	
	@Bean
	public ClientDetailsServiceConfigurer clientDetailsServiceConfigurer() {
		return configurer;
	}

	@Bean
	@Lazy
	@Scope(proxyMode=ScopedProxyMode.INTERFACES)
	public ClientDetailsService clientDetailsService() throws Exception {
		return configurer.and().build();
	}

}

ClientDetailsServiceConfigurer

...
// 替換為自定義客戶端信息服務
public ClientDetailsServiceBuilder<?> withClientDetails(ClientDetailsService clientDetailsService) throws Exception {
setBuilder(getBuilder().clients(clientDetailsService));
	return this.and();
}
// 替換為內存客戶端信息服務
public InMemoryClientDetailsServiceBuilder inMemory() throws Exception {
	InMemoryClientDetailsServiceBuilder next = getBuilder().inMemory();
	setBuilder(next);
	return next;
}
// 替換為JDBC客戶端信息服務
public JdbcClientDetailsServiceBuilder jdbc(DataSource dataSource) throws Exception {
	JdbcClientDetailsServiceBuilder next = getBuilder().jdbc().dataSource(dataSource);
	setBuilder(next);
	return next;
}
...

passwordEncoder

AuthorizationServerConfigurerAdapter

@Override
public void configure(AuthorizationServerSecurityConfigurer security) throws Exception {
    security.passwordEncoder(passwordEncoder);
}

AuthorizationServerSecurityConfigurer

@Override
public void init(HttpSecurity http) throws Exception {
...
// 根據有無配置編碼器實例化ClientDetailsUserDetailsService
	if (passwordEncoder != null) {
		ClientDetailsUserDetailsService clientDetailsUserDetailsService = new ClientDetailsUserDetailsService(clientDetailsService());
		clientDetailsUserDetailsService.setPasswordEncoder(passwordEncoder());
		http.getSharedObject(AuthenticationManagerBuilder.class)
				.userDetailsService(clientDetailsUserDetailsService)
				.passwordEncoder(passwordEncoder());
	}
	else {
		http.userDetailsService(new ClientDetailsUserDetailsService(clientDetailsService()));
	}
}