spring-boot-oauth-server

pom.xml

@@ -18,5 +18,6 @@
         <module>spring-boot-dockerization</module>
         <module>spring-boot-jwt</module>
         <module>spring-boot-aop</module>
+        <module>spring-boot-oauth2</module>
     </modules>
 </project>

spring-boot-oauth2/pom.xml

@@ -0,0 +1,53 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project xmlns="http://maven.apache.org/POM/4.0.0"
+         xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
+    <modelVersion>4.0.0</modelVersion>
+
+    <artifactId>spring-boot-oauth2</artifactId>
+
+    <version>1.0.1</version>
+
+    <parent>
+        <groupId>org.springframework.boot</groupId>
+        <artifactId>spring-boot-starter-parent</artifactId>
+        <version>2.2.2.RELEASE</version>
+        <relativePath/> <!-- lookup parent from repository -->
+    </parent>
+
+    <dependencies>
+        <dependency>
+            <groupId>org.springframework.boot</groupId>
+            <artifactId>spring-boot-starter-web</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>org.springframework</groupId>
+            <artifactId>spring-jdbc</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>com.h2database</groupId>
+            <artifactId>h2</artifactId>
+            <version>1.4.200</version>
+        </dependency>
+        <dependency>
+            <groupId>org.springframework.security.oauth</groupId>
+            <artifactId>spring-security-oauth2</artifactId>
+            <version>2.3.3.RELEASE</version>
+        </dependency>
+
+        <dependency>
+            <groupId>org.glassfish.jaxb</groupId>
+            <artifactId>jaxb-runtime</artifactId>
+            <version>2.3.2</version>
+        </dependency>
+    </dependencies>
+
+    <build>
+        <plugins>
+            <plugin>
+                <groupId>org.springframework.boot</groupId>
+                <artifactId>spring-boot-maven-plugin</artifactId>
+            </plugin>
+        </plugins>
+    </build>
+</project>

spring-boot-oauth2/readme.md

@@ -0,0 +1,35 @@
+
+###Client Bilgileri
+- client_id – Authorization yapilacak client id
+- client_secret – ilgili client a ait özel bir kod (client sifresi)
+- access_token_validity – client in hala geçerli olup olmadığını gösterir
+- authorities – client a hangi rollere izin verildiğini belirtmek için
+- scope – izin verilecek scope 
+- authorized_grant_types, kullanıcıların belirli client a nasıl giriş yapabileceği (bizim örneğimizde parola ile bir form girişi)
+
+
+```
+create table oauth_client_details (
+    client_id VARCHAR(256) PRIMARY KEY,
+    resource_ids VARCHAR(256),
+    client_secret VARCHAR(256),
+    scope VARCHAR(256),
+    authorized_grant_types VARCHAR(256),
+    web_server_redirect_uri VARCHAR(256),
+    authorities VARCHAR(256),
+    access_token_validity INTEGER,
+    refresh_token_validity INTEGER,
+    additional_information VARCHAR(4096),
+    autoapprove VARCHAR(256)
+);
+```
+
+```
+INSERT INTO oauth_client_details
+    (client_id, client_secret, scope, authorized_grant_types,
+    web_server_redirect_uri, authorities, access_token_validity,
+    refresh_token_validity, additional_information, autoapprove)
+VALUES
+    ('uygulama1', '$2a$10$yUPOeM1kXeA8YY/rIT0w6uLJjQnwompxQ0xG.9hsK6b27vAzaprn6', 'uygulama1,read,write','password,authorization_code,refresh_token', null, null, 36000, 36000, null, true)
+
+```

spring-boot-oauth2/src/main/java/com/haydikodlayalim/oauth/SpringOAuthApplication.java

@@ -0,0 +1,12 @@
+package com.haydikodlayalim.oauth;
+
+import org.springframework.boot.SpringApplication;
+import org.springframework.boot.autoconfigure.SpringBootApplication;
+
+@SpringBootApplication
+public class SpringOAuthApplication {
+
+    public static void main(String[] args) {
+        SpringApplication.run(SpringOAuthApplication.class, args);
+    }
+}

spring-boot-oauth2/src/main/java/com/haydikodlayalim/oauth/api/ApiController.java

@@ -0,0 +1,17 @@
+package com.haydikodlayalim.oauth.api;
+
+import java.security.Principal;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RestController;
+
+@RestController
+@RequestMapping("/user")
+public class ApiController {
+
+
+    @GetMapping("/me")
+    public Principal user(Principal principal) {
+        return principal;
+    }
+}

spring-boot-oauth2/src/main/java/com/haydikodlayalim/oauth/config/AuthServerConfig.java

@@ -0,0 +1,21 @@
+package com.haydikodlayalim.oauth.config;
+
+import javax.sql.DataSource;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.security.oauth2.config.annotation.configurers.ClientDetailsServiceConfigurer;
+import org.springframework.security.oauth2.config.annotation.web.configuration.AuthorizationServerConfigurerAdapter;
+import org.springframework.security.oauth2.config.annotation.web.configuration.EnableAuthorizationServer;
+
+@Configuration
+@EnableAuthorizationServer
+public class AuthServerConfig extends AuthorizationServerConfigurerAdapter {
+
+    @Autowired
+    private DataSource dataSource;
+
+    @Override
+    public void configure(final ClientDetailsServiceConfigurer auth) throws Exception {
+        auth.jdbc(dataSource);
+    }
+}

spring-boot-oauth2/src/main/java/com/haydikodlayalim/oauth/config/SecurityConfig.java

@@ -0,0 +1,41 @@
+package com.haydikodlayalim.oauth.config;
+
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.core.annotation.Order;
+import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
+import org.springframework.security.config.annotation.web.builders.HttpSecurity;
+import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
+import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
+
+@Configuration
+@Order(1)
+public class SecurityConfig extends WebSecurityConfigurerAdapter {
+
+
+    @Override
+    protected void configure(HttpSecurity http) throws Exception {
+        http.requestMatchers()
+                .antMatchers("/login", "/oauth/authorize")
+                .and()
+                .authorizeRequests()
+                .anyRequest().authenticated()
+                .and()
+                .formLogin().permitAll();
+    }
+
+    @Override
+    protected void configure(AuthenticationManagerBuilder auth) throws Exception {
+        auth.inMemoryAuthentication()
+                .withUser("admin")
+                .password(passwordEncoder().encode("admin"))
+                .roles("USER");
+
+        System.out.println(passwordEncoder().encode("admin"));
+    }
+
+    @Bean
+    public BCryptPasswordEncoder passwordEncoder() {
+        return new BCryptPasswordEncoder();
+    }
+}

spring-boot-oauth2/src/main/resources/application.properties

@@ -0,0 +1,2 @@
+spring.h2.console.enabled=true
+spring.h2.console.path=/h2-console