nz.co.katatech.springboot.security.stateless.oauth.DisableStateRestTemplateCustomizer Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of spring-stateless-security Show documentation

Stateless security using JWT token. Includes stateless CSRF protection, integration OAuth2SSO

There is a newer version: 1.2

Show newest version

package nz.co.katatech.springboot.security.stateless.oauth;

import com.google.common.collect.Lists;
import org.springframework.boot.autoconfigure.security.oauth2.resource.UserInfoRestTemplateCustomizer;
import org.springframework.security.oauth2.client.OAuth2RestTemplate;
import org.springframework.security.oauth2.client.token.AccessTokenProvider;
import org.springframework.security.oauth2.client.token.AccessTokenProviderChain;
import org.springframework.security.oauth2.client.token.grant.client.ClientCredentialsAccessTokenProvider;
import org.springframework.security.oauth2.client.token.grant.implicit.ImplicitAccessTokenProvider;
import org.springframework.security.oauth2.client.token.grant.password.ResourceOwnerPasswordAccessTokenProvider;

public class DisableStateRestTemplateCustomizer implements UserInfoRestTemplateCustomizer {

    @Override
    public void customize( OAuth2RestTemplate template ) {

        AccessTokenProvider accessTokenProvider = new AccessTokenProviderChain( Lists.newArrayList(
            new IgnoreStateParamAuthorizationCodeAccessTokenProvider(),  //Customised AuthorizationCodeAccessTokenProvider
            new ImplicitAccessTokenProvider(),
            new ResourceOwnerPasswordAccessTokenProvider(),
            new ClientCredentialsAccessTokenProvider()
        ) );

        template.setAccessTokenProvider( accessTokenProvider );
    }
}