JarCastingspring-openid-client
An "off the shelf" implementation of spring as an oauth2 or openid connect client.
There is nothing special in here and this does nothing that spring does not do out of the box.
However there are so many examples "on the internet" nowdays and many of them make assumptions on technical stacks or don't provide a full working solution that it can actually be difficult to get this going as a client only.
This module is simply to alleviate the need to learn something that really should be just a commodity
How do I use this?
Add this dependency
<dependency>
<groupId>tech.rsqn</groupId>
<artifactId>spring-openid-client</artifactId>
<version>1.0.3</version>
</dependency>
Add spring dependencies to your project as the dependencies in this project are scoped as "provided"
todo - have a look at the POM file
Ensure these properties are available in your spring context
oauth2.authUri=XX
oauth2.accessTokenUri=XX
oauth2.userInfoUri=XX
oauth2.clientId=XX
oauth2.clientSecret=XX
oauth2.scope=trust,openid
oauth2.authenticationScheme=header
Create a web security configuration class like this in your project
@Configuration
@EnableWebSecurity
public class OAuth2WebSecurityConfigurer extends WebSecurityConfigurerAdapter {
private final String AUTH_URI = "/app_auth";
@Bean
public AuthenticationEntryPoint authenticationEntryPoint() {
return new LoginUrlAuthenticationEntryPoint(AUTH_URI);
}
@Bean
public OpenIDConnectAuthenticationFilter openIdConnectAuthenticationFilter() {
return new OpenIDConnectAuthenticationFilter(AUTH_URI);
}
@Bean
public OAuth2ClientContextFilter oAuth2ClientContextFilter() {
return new OAuth2ClientContextFilter();
}
@Override
protected void configure(HttpSecurity http) throws Exception {
http.addFilterAfter(oAuth2ClientContextFilter(), AbstractPreAuthenticatedProcessingFilter.class)
.addFilterAfter(openIdConnectAuthenticationFilter(), OAuth2ClientContextFilter.class)
.exceptionHandling().authenticationEntryPoint(authenticationEntryPoint())
.and().authorizeRequests()
.antMatchers(HttpMethod.GET, "/unprotected").permitAll()
.antMatchers(HttpMethod.GET, "/*").authenticated();
}
}
Ensure this is in your spring config
<context:annotation-config/>
<context:component-scan base-package="tech.rsqn.springopenidclient" />
<context:component-scan base-package="THE_PACKAGE_YOU_HAVE_THE_ABOVE_CONFIGURATION_CLASS_IN" />
... aaaand it should work
