SpringSecurity实战教程（十五）快速集成 GitHub 与 Gitee 的社交登录

1
# 最新 Spring Security 实战教程（十五）快速集成 GitHub 与 Gitee 的社交登录
2
spring:
3
  application:
4
    name: social-login-spring-security
5
  security:
6
    oauth2:
7
      client:
8
        registration:
9
          github:
10
            client-id: YOUR_CLIENT_ID
11
            client-secret: YOUR_CLIENT_SECRET
12
            scope: user:email
13
            redirect-uri: "{baseUrl}/login/oauth2/code/{registrationId}"
14
            authorization-grant-type: authorization_code
15
            client-name: github
16
          gitee:
17
            client-id: YOUR_CLIENT_ID
18
            client-secret: YOUR_CLIENT_SECRET
19
            scope: user_info
20
            client-name: Gitee
21
            authorization-grant-type: authorization_code
22
            redirect-uri: "{baseUrl}/login/oauth2/code/{registrationId}"
23
            provider: gitee
24
        provider:
25
          gitee:
26
            authorization-uri: https://gitee.com/oauth/authorize
27
            token-uri: https://gitee.com/oauth/token
28
            user-info-uri: https://gitee.com/api/v5/user
29
            user-name-attribute: name
30
server:
31
  port: 8089

1
public class CustomOAuth2UserService implements OAuth2UserService<OAuth2UserRequest, OAuth2User> {
2

3
    @Override
4
    public OAuth2User loadUser(OAuth2UserRequest userRequest) throws OAuth2AuthenticationException {
5
        DefaultOAuth2UserService delegate = new DefaultOAuth2UserService();
6
        OAuth2User oAuth2User = delegate.loadUser(userRequest);
7

8
        String registrationId = userRequest.getClientRegistration().getRegistrationId();
9
        Map<String, Object> attributes = oAuth2User.getAttributes();
10

11
        // 根据平台解析用户信息
12
        if ("github".equals(registrationId)) {
13
            return new DefaultOAuth2User(
14
                oAuth2User.getAuthorities(),
15
                attributes,
16
                "login"  // GitHub 的用户名字段
17
            );
18
        } else if ("gitee".equals(registrationId)) {
19
            return new DefaultOAuth2User(
20
                oAuth2User.getAuthorities(),
21
                attributes,
22
                "name"   // Gitee 的用户名字段
23
            );
24
        }
25
        throw new OAuth2AuthenticationException("Unsupported platform");
26
    }
27
}

1
@Configuration
2
@EnableWebSecurity
3
public class SecurityConfig {
4

5
    @Bean
6
    public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception {
7
        http
8
                .authorizeHttpRequests(authorize -> authorize
9
                        .requestMatchers("/", "/public/**").permitAll()
10
                        .anyRequest().authenticated()
11
                )
12
                .oauth2Login(oauth2 -> oauth2
13
                        .userInfoEndpoint(userInfo -> userInfo
14
                                .userService(customOAuth2UserService())
15
                        )
16
                )
17
                .csrf(AbstractHttpConfigurer::disable);
18
        return http.build();
19
    }
20

21
    @Bean
22
    public OAuth2UserService<OAuth2UserRequest, OAuth2User> customOAuth2UserService() {
23
        return new CustomOAuth2UserService();
24
    }
25
}

1
@Controller
2
public class IndexController {
3
    @GetMapping("/")
4
    public String index(Model model, @RegisteredOAuth2AuthorizedClient OAuth2AuthorizedClient authorizedClient,
5
                        @AuthenticationPrincipal OAuth2User oauth2User) {
6
        model.addAttribute("userName", oauth2User.getName());
7
        model.addAttribute("clientName", authorizedClient.getClientRegistration().getClientName());
8
        model.addAttribute("userAttributes", oauth2User.getAttributes());
9
        // TODO 可以增加与项目用户注册、绑定等业务 service
10
        return "index";
11
    }
12

13
    @GetMapping("/user")
14
    @ResponseBody
15
    public Map<String, Object> userInfo(OAuth2AuthenticationToken authentication) {
16
        OAuth2User user = authentication.getPrincipal();
17
        return Map.of(
18
                "username", user.getName(),
19
                "authorities", user.getAuthorities().stream()
20
                        .map(GrantedAuthority::getAuthority)
21
                        .collect(Collectors.toList())
22
        );
23
    }
24
}

1
<!DOCTYPE html>
2
<html xmlns="http://www.w3.org/1999/xhtml" xmlns:th="https://www.thymeleaf.org" xmlns:sec="https://www.thymeleaf.org/thymeleaf-extras-springsecurity5">
3
<head>
4
    <title>Spring Security - OAuth 2.0 Login</title>
5
    <meta charset="utf-8" />
6
</head>
7
<body>
8
<div style="float: right" th:fragment="logout" sec:authorize="isAuthenticated()">
9
    <div style="float:left">
10
        <span style="font-weight:bold">User: </span><span sec:authentication="name"></span>
11
    </div>
12
    <div style="float:none">&nbsp;</div>
13
    <div style="float:right">
14
        <form action="#" th:action="@{/logout}" method="post">
15
            <input type="submit" value="Logout" />
16
        </form>
17
    </div>
18
</div>
19
<h1>OAuth 2.0 Login with Spring Security</h1>
20
<div>
21
    You are successfully logged in <span style="font-weight:bold" th:text="${userName}"></span>
22
    via the OAuth 2.0 Client <span style="font-weight:bold" th:text="${clientName}"></span>
23
</div>
24
<div>&nbsp;</div>
25
<div>
26
    <span style="font-weight:bold">User Attributes:</span>
27
    <ul>
28
        <li th:each="userAttribute : ${userAttributes}">
29
            <span style="font-weight:bold" th:text="${userAttribute.key}"></span>: <span th:text="${userAttribute.value}"></span>
30
        </li>
31
    </ul>
32
</div>
33
</body>
34
</html>