在我的java服务器应用程序中,尝试使用密码授予流程进行身份验证时出现以下错误:
TokenEndpoint - Handling error: InvalidClientException, Unauthorized grant type: password
我确实为相关用户明确允许了这笔款项:
@Override
public void configure(ClientDetailsServiceConfigurer clients) throws Exception {
clients.inMemory()
.withClient("officialclient")
.authorizedGrantTypes("authorization_code, refresh_token, password")
.authorities("ROLE_CLIENT")
.scopes("read", "write")
.resourceIds(RESOURCE_ID)
.secret("officialclientsecret")
.redirectUris("https://www.someurl.com/")
}
我使用以下代码检索访问令牌:
ResourceOwnerPasswordResourceDetails resourceDetails = new ResourceOwnerPasswordResourceDetails();
resourceDetails.setClientAuthenticationScheme(AuthenticationScheme.header);
resourceDetails.setAccessTokenUri("http://localhost:8080/organizer/oauth/token");
resourceDetails.setScope(Arrays.asList("read", "write"));
resourceDetails.setId("resource");
resourceDetails.setClientId("officialclient");
resourceDetails.setClientSecret("officialclientsecret");
resourceDetails.setUsername("Paul");
resourceDetails.setPassword("password");
OAuth2RestTemplate template = new OAuth2RestTemplate(resourceDetails, context);
return template.getAccessToken().getValue();
是否存在允许密码授予类型的全局设置?
答案 0 :(得分:1)
您应该使用变量参数,而不是逗号分隔的字符串值,如下所示:
.authorizedGrantTypes("authorization_code, refresh_token, password")
将其替换为:
.authorizedGrantTypes("authorization_code", "refresh_token", "password")
答案 1 :(得分:0)
您需要向AuthenticationManager
提供AuthorizationServerEndpointsConfigurer
。授权类型下的更多信息here。例如:
@Override
public void configure(AuthorizationServerEndpointsConfigurer endpoints) throws Exception {
endpoints.authenticationManager(authenticationManager);
}
如果你想使用spring boot提供的默认管理器进行开发,你可以像这样抓住bean:
@Component
@EnableAuthorizationServer
public class MyAuthorizationServerConfigurer extends AuthorizationServerConfigurerAdapter {
private final AuthenticationManager authenticationManager;
public MyAuthorizationServerConfigurer(AuthenticationConfiguration authenticationConfiguration) throws Exception {
this.authenticationManager = authenticationConfiguration.getAuthenticationManager();
}
}