Question

我在IDP模式和spring-boot中使用spring-security-oauth2。在从请求中提取oauth令牌之前，我需要做一些工作。如何在OAuth2AuthenticationProcessingFilter之前添加过滤器？

我试过了：

@Configuration
@EnableResourceServer
public class OAuth2ResourceServerConfigurerAdapter extends ResourceServerConfigurerAdapter {

    @Override
    public void configure(HttpSecurity http) throws Exception {

        http.authorizeRequests().anyRequest().authenticated().and()
                .addFilterBefore(new MyFilter(), OAuth2AuthenticationProcessingFilter.class);
    }

}

但我得到以下例外：

java.lang.IllegalArgumentException：无法注册未注册的Filter类org.springframework.security.oauth2.provider.authentication.OAuth2AuthenticationProcessingFilter

我想这可能是因为@EnableResourceServer之后执行了configure(HttpSecurity http)。

Answer 1

我做到了这一点

                .addFilterBefore(new MyTokenFilter(), AbstractPreAuthenticatedProcessingFilter.class)

Answer 2

以下内容对我有用

   @Override
   public void configure(HttpSecurity http) throws Exception {
       http
         .addFilterBefore(new MyFilter(), AbstractPreAuthenticatedProcessingFilter.class)
         .authorizeRequests().anyRequest().fullyAuthenticated()
       ;
   }

结果

Security filter chain: [
  WebAsyncManagerIntegrationFilter
  SecurityContextPersistenceFilter
  HeaderWriterFilter
  LogoutFilter
  MyFilter
  OAuth2AuthenticationProcessingFilter
  RequestCacheAwareFilter
  SecurityContextHolderAwareRequestFilter
  AnonymousAuthenticationFilter
  SessionManagementFilter
  ExceptionTranslationFilter
  FilterSecurityInterceptor
]

在OAuth2AuthenticationProcessingFilter之前添加过滤器

2 个答案: