springboot集成keycloak

Spring Boot可以很方便地集成Keycloak，下面是一个简单的步骤：

1. 添加Keycloak依赖：在你的项目的`pom.xml`文件中添加以下依赖：

<dependency>
    <groupId>org.keycloak</groupId>
    <artifactId>keycloak-spring-boot-starter</artifactId>
</dependency>

2. 配置Keycloak：在你的`application.properties`或`application.yml`中添加Keycloak的配置信息，比如：

keycloak.realm=your-realm
keycloak.auth-server-url=http://your-keycloak-url/auth
keycloak.ssl-required=external
keycloak.resource=your-client-id
keycloak.credentials.secret=your-client-secret
keycloak.use-resource-role-mappings=true

3. 创建Keycloak的安全配置类：创建一个`KeycloakSecurityConfig.java`类，添加以下内容：

@Configuration
@EnableWebSecurity
@ComponentScan(basePackageClasses = KeycloakSecurityComponents.class)
public class KeycloakSecurityConfig extends KeycloakWebSecurityConfigurerAdapter {

    @Autowired
    public void configureGlobal(AuthenticationManagerBuilder auth) throws Exception {
        KeycloakAuthenticationProvider keycloakAuthenticationProvider = keycloakAuthenticationProvider();
        keycloakAuthenticationProvider.setGrantedAuthoritiesMapper(new SimpleAuthorityMapper());
        auth.authenticationProvider(keycloakAuthenticationProvider);
    }

    @Bean
    public KeycloakSpringBootConfigResolver keycloakConfigResolver() {
        return new KeycloakSpringBootConfigResolver();
    }

    @Bean
    @Override
    protected SessionAuthenticationStrategy sessionAuthenticationStrategy() {
        return new RegisterSessionAuthenticationStrategy(new SessionRegistryImpl());
    }

    @Override
    protected void configure(HttpSecurity http) throws Exception {
        super.configure(http);
        http.authorizeRequests()
                .antMatchers("/your-secured-url").authenticated()
                .anyRequest().permitAll();
    }
}

4. 创建一个受保护的API：在你的控制器类中添加一个需要认证的API接口，比如：

@RestController
@RequestMapping("/api")
public class YourController {

    @GetMapping("/your-secured-url")
    public String yourSecuredEndpoint() {
        return "This is a secured endpoint";
    }
}

现在你的Spring Boot应用已经集成了Keycloak，可以通过访问`/api/your-secured-url`来测试保护的API接口。当访问该接口时，系统将要求用户进行认证并验证其授权信息。