英文:
How to get access token just after login in successHandler in spring oauth2 security?
问题
目前，我正在进行一个项目，在这个项目中，一个要求是在Spring成功处理程序中收集 accessToken（访问令牌），就在登录后立即获取。我阅读了不同的博客，但没有找到任何可能的解决方案。下面是我尝试过的代码片段，
这是我的成功处理程序，在这里我试图获取accessToken。但是当我尝试将 authentication.getDetails() 转换为 OAuth2AuthenticationDetails 时，我遇到了异常。
@Component
public class AuthSuccessListener implements ApplicationListener<AuthenticationSuccessEvent> {
@Override
public void onApplicationEvent(AuthenticationSuccessEvent event) {
UserDetails userDetails = (UserDetails) event.getAuthentication().getPrincipal();
System.out.println(userDetails);
System.out.println("密码是：" + userDetails.getPassword());
System.out.println("用户名是：" + userDetails.getUsername());
Authentication authentication = SecurityContextHolder.getContext().getAuthentication();
//Authentication authentication = event.getAuthentication();
OAuth2AuthenticationDetails details = (OAuth2AuthenticationDetails) authentication.getDetails();
String accessToken = details.getTokenValue();
System.out.println(accessToken);
}
}
我不知道这个方法是否有效。如果有其他方法可以在成功处理程序或其他地方在登录后立即获取accessToken，那么请帮助解决这个问题。
英文:
Currently, I am working on a project where a requirement is accessToken need to be collected at spring success handler just after login. I read different blogs but couldn't found any possible solution. Here I am giving code snippet that I tried,
This is my success handler where I am trying to get accessToken. But when I am trying to cast authentication.getDetails() to OAuth2AuthenticationDetails I am getting exception.
@Component
public class AuthSuccessListener implements ApplicationListener<AuthenticationSuccessEvent> {
@Override
public void onApplicationEvent(AuthenticationSuccessEvent event) {
UserDetails userDetails = (UserDetails) event.getAuthentication().getPrincipal();
System.out.println(userDetails);
System.out.println("pass is " + userDetails.getPassword());
System.out.println("username is " + userDetails.getUsername());
Authentication authentication = SecurityContextHolder.getContext().getAuthentication();
//Authentication authentication = event.getAuthentication();
OAuth2AuthenticationDetails details = (OAuth2AuthenticationDetails) authentication.getDetails();
String accessToken = details.getTokenValue();
System.out.println(accessToken);
}
}
I don't know whether this approach is valid or not. If there any other way to get accessToken just after login in successHandler or somewhere else, then please help to solve this issue.
答案1
得分: 1
至少我找到了一个解决方案，在登录后立即在成功处理程序（succeshandler）中获取令牌。由于我没有在短时间内找到相关的解决方案，所以我正在发布这个答案。我是这样解决这个问题的。
@Component
public class AuthSuccessListener implements ApplicationListener<AuthenticationSuccessEvent> {
private final TokenStore tokenStore;
public AuthSuccessListener(TokenStore tokenStore) {
this.tokenStore = tokenStore;
}
@Override
public void onApplicationEvent(AuthenticationSuccessEvent event) {
UserDetails userDetails = (UserDetails) event.getAuthentication().getPrincipal();
String accessToken = null;
List<OAuth2AccessToken> tokens = (List<OAuth2AccessToken>) tokenStore.findTokensByClientIdAndUserName("your Client Id", userDetails.getUsername());
if (tokens.size() > 0) {
accessToken = tokens.get(0).getValue();
}
}
}
在这里，你可以看到我使用了 TokenStore 来通过方法 tokenStore.findTokensByClientIdAndUserName("your Client Id", userDetails.getUsername()); 使用 clientId 和 username 检索令牌。
就是这样。
英文:
At least I found a solution to get token at succeshandler just after login. As I haven't got relevant solution in short, that's why I am posting this answer. I solved the issue like this.
@Component
public class AuthSuccessListener implements ApplicationListener<AuthenticationSuccessEvent> {
private final TokenStore tokenStore;
public AuthSuccessListener(TokenStore tokenStore) {
this.tokenStore = tokenStore;
}
@Override
public void onApplicationEvent(AuthenticationSuccessEvent event) {
UserDetails userDetails = (UserDetails) event.getAuthentication().getPrincipal();
String accessToken = null;
List<OAuth2AccessToken> tokens = (List<OAuth2AccessToken>) tokenStore.findTokensByClientIdAndUserName("your Client Id", userDetails.getUsername());
if (tokens.size() > 0) {
accessToken = tokens.get(0).getValue();
}
}
}
Here you can see I used TokenStore to reteive token by using clientId and username with method tokenStore.findTokensByClientIdAndUserName("your Client Id", userDetails.getUsername());
That's it.
通过集体智慧和协作来改善编程学习和解决问题的方式。致力于成为全球开发者共同参与的知识库，让每个人都能够通过互相帮助和分享经验来进步。
评论