spring authorazation server 配置自定义认证授权

Spring Authorization Server是一个基于Spring Security的库，用于快速构建授权服务器。要配置自定义认证和授权，您需要按照以下步骤进行操作：

1. 创建一个自定义的AuthenticationProvider实现类，该类将实现身份验证逻辑。

public class CustomAuthenticationProvider implements AuthenticationProvider {

    @Override
    public Authentication authenticate(Authentication authentication) throws AuthenticationException {
        // 进行身份验证逻辑
    }

    @Override
    public boolean supports(Class<?> authentication) {
        // 返回此provider支持的Authentication对象类型，例如UsernamePasswordAuthenticationToken
    }
}

2. 将此AuthenticationProvider添加到AuthenticationManagerBuilder中。

@Configuration
@EnableWebSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter {

    @Autowired
    private CustomAuthenticationProvider customAuthenticationProvider;

    @Override
    protected void configure(AuthenticationManagerBuilder auth) throws Exception {
        auth.authenticationProvider(customAuthenticationProvider);
    }
}

3. 创建一个自定义的AuthorizationServerConfigurer实现类，该类将实现授权逻辑。

public class CustomAuthorizationServerConfigurer implements AuthorizationServerConfigurer {

    @Override
    public void configure(AuthorizationServerSecurityConfigurer security) throws Exception {
        // 配置AuthorizationServer安全属性
    }

    @Override
    public void configure(ClientDetailsServiceConfigurer clients) throws Exception {
        // 配置ClientDetailsService，例如使用内存中的ClientDetailsService
    }

    @Override
    public void configure(AuthorizationServerEndpointsConfigurer endpoints) throws Exception {
        // 配置AuthorizationServer的端点属性，例如使用自定义的TokenGranter
    }
}

4. 将此CustomAuthorizationServerConfigurer添加到AuthorizationServerConfigurerAdapter中。

@Configuration
@EnableAuthorizationServer
public class AuthorizationServerConfig extends AuthorizationServerConfigurerAdapter {

    @Autowired
    private CustomAuthorizationServerConfigurer customAuthorizationServerConfigurer;

    @Override
    public void configure(AuthorizationServerSecurityConfigurer security) throws Exception {
        customAuthorizationServerConfigurer.configure(security);
    }

    @Override
    public void configure(ClientDetailsServiceConfigurer clients) throws Exception {
        customAuthorizationServerConfigurer.configure(clients);
    }

    @Override
    public void configure(AuthorizationServerEndpointsConfigurer endpoints) throws Exception {
        customAuthorizationServerConfigurer.configure(endpoints);
    }
}

通过以上步骤，您可以使用自定义的AuthenticationProvider和AuthorizationServerConfigurer实现自定义认证和授权。