10 | * http://www.apache.org/licenses/LICENSE-2.0 11 | *
12 | * Unless required by applicable law or agreed to in writing, software 13 | * distributed under the License is distributed on an "AS IS" BASIS, 14 | * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 15 | * See the License for the specific language governing permissions and 16 | * limitations under the License. 17 | */ 18 | package com.edurt.sski; 19 | 20 | import org.springframework.boot.SpringApplication; 21 | import org.springframework.boot.autoconfigure.SpringBootApplication; 22 | 23 | /** 24 | *
SpringBootSecurityKeyCloakIntegration
25 | *Description : SpringBootSecurityKeyCloakIntegration
26 | *Author : qianmoQ
27 | *Version : 1.0
28 | *Create Time : 2019-02-18 14:45
29 | *Author Email: qianmoQ
30 | */ 31 | @SpringBootApplication 32 | public class SpringBootSecurityKeyCloakIntegration { 33 | 34 | public static void main(String[] args) { 35 | SpringApplication.run(SpringBootSecurityKeyCloakIntegration.class, args); 36 | } 37 | 38 | } -------------------------------------------------------------------------------- /src/main/java/com/edurt/sski/config/KeycloakSecurityConfigurer.java: -------------------------------------------------------------------------------- 1 | /** 2 | * Licensed to the Apache Software Foundation (ASF) under one 3 | * or more contributor license agreements. See the NOTICE file 4 | * distributed with this work for additional information 5 | * regarding copyright ownership. The ASF licenses this file 6 | * to you under the Apache License, Version 2.0 (the 7 | * "License"); you may not use this file except in compliance 8 | * with the License. You may obtain a copy of the License at 9 | *10 | * http://www.apache.org/licenses/LICENSE-2.0 11 | *
12 | * Unless required by applicable law or agreed to in writing, software 13 | * distributed under the License is distributed on an "AS IS" BASIS, 14 | * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 15 | * See the License for the specific language governing permissions and 16 | * limitations under the License. 17 | */ 18 | package com.edurt.sski.config; 19 | 20 | import org.keycloak.adapters.KeycloakConfigResolver; 21 | import org.keycloak.adapters.springboot.KeycloakSpringBootConfigResolver; 22 | import org.keycloak.adapters.springsecurity.authentication.KeycloakAuthenticationProvider; 23 | import org.keycloak.adapters.springsecurity.config.KeycloakWebSecurityConfigurerAdapter; 24 | import org.keycloak.adapters.springsecurity.filter.KeycloakAuthenticationProcessingFilter; 25 | import org.keycloak.adapters.springsecurity.filter.KeycloakPreAuthActionsFilter; 26 | import org.springframework.boot.web.servlet.FilterRegistrationBean; 27 | import org.springframework.context.annotation.Bean; 28 | import org.springframework.context.annotation.Configuration; 29 | import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder; 30 | import org.springframework.security.config.annotation.web.builders.HttpSecurity; 31 | import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity; 32 | import org.springframework.security.core.authority.mapping.GrantedAuthoritiesMapper; 33 | import org.springframework.security.core.authority.mapping.SimpleAuthorityMapper; 34 | import org.springframework.security.web.authentication.session.NullAuthenticatedSessionStrategy; 35 | import org.springframework.security.web.authentication.session.SessionAuthenticationStrategy; 36 | 37 | /** 38 | *
KeycloakSecurityConfigurer
39 | *Description : KeycloakSecurityConfigurer
40 | *Author : qianmoQ
41 | *Version : 1.0
42 | *Create Time : 2019-02-18 14:51
43 | *Author Email: qianmoQ
44 | */ 45 | @Configuration 46 | @EnableWebSecurity 47 | public class KeycloakSecurityConfigurer extends KeycloakWebSecurityConfigurerAdapter { 48 | 49 | @Bean 50 | public GrantedAuthoritiesMapper grantedAuthoritiesMapper() { 51 | SimpleAuthorityMapper mapper = new SimpleAuthorityMapper(); 52 | mapper.setConvertToUpperCase(true); 53 | return mapper; 54 | } 55 | 56 | @Override 57 | protected KeycloakAuthenticationProvider keycloakAuthenticationProvider() { 58 | final KeycloakAuthenticationProvider provider = super.keycloakAuthenticationProvider(); 59 | provider.setGrantedAuthoritiesMapper(grantedAuthoritiesMapper()); 60 | return provider; 61 | } 62 | 63 | @Override 64 | protected void configure(final AuthenticationManagerBuilder auth) throws Exception { 65 | auth.authenticationProvider(keycloakAuthenticationProvider()); 66 | } 67 | 68 | @Override 69 | protected SessionAuthenticationStrategy sessionAuthenticationStrategy() { 70 | return new NullAuthenticatedSessionStrategy(); 71 | } 72 | 73 | @Override 74 | protected void configure(final HttpSecurity http) throws Exception { 75 | super.configure(http); 76 | http 77 | .authorizeRequests() 78 | .antMatchers("/admin").hasRole("ADMIN") 79 | .antMatchers("/user").hasRole("USER") 80 | .anyRequest().permitAll(); 81 | } 82 | 83 | @Bean 84 | KeycloakConfigResolver keycloakConfigResolver() { 85 | return new KeycloakSpringBootConfigResolver(); 86 | } 87 | 88 | @Bean 89 | public FilterRegistrationBean keycloakAuthenticationProcessingFilterRegistrationBean( 90 | final KeycloakAuthenticationProcessingFilter filter) { 91 | final FilterRegistrationBean registrationBean = new FilterRegistrationBean(filter); 92 | registrationBean.setEnabled(false); 93 | return registrationBean; 94 | } 95 | 96 | @Bean 97 | public FilterRegistrationBean keycloakPreAuthActionsFilterRegistrationBean( 98 | final KeycloakPreAuthActionsFilter filter) { 99 | final FilterRegistrationBean registrationBean = new FilterRegistrationBean(filter); 100 | registrationBean.setEnabled(false); 101 | return registrationBean; 102 | } 103 | 104 | } -------------------------------------------------------------------------------- /src/main/java/com/edurt/sski/config/package-info.java: -------------------------------------------------------------------------------- 1 | package com.edurt.sski.config; -------------------------------------------------------------------------------- /src/main/java/com/edurt/sski/controller/HelloController.java: -------------------------------------------------------------------------------- 1 | /** 2 | * Licensed to the Apache Software Foundation (ASF) under one 3 | * or more contributor license agreements. See the NOTICE file 4 | * distributed with this work for additional information 5 | * regarding copyright ownership. The ASF licenses this file 6 | * to you under the Apache License, Version 2.0 (the 7 | * "License"); you may not use this file except in compliance 8 | * with the License. You may obtain a copy of the License at 9 | *10 | * http://www.apache.org/licenses/LICENSE-2.0 11 | *
12 | * Unless required by applicable law or agreed to in writing, software 13 | * distributed under the License is distributed on an "AS IS" BASIS, 14 | * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 15 | * See the License for the specific language governing permissions and 16 | * limitations under the License. 17 | */ 18 | package com.edurt.sski.controller; 19 | 20 | import org.springframework.security.access.annotation.Secured; 21 | import org.springframework.web.bind.annotation.GetMapping; 22 | import org.springframework.web.bind.annotation.RestController; 23 | 24 | /** 25 | *
HelloController
26 | *Description : HelloController
27 | *Author : qianmoQ
28 | *Version : 1.0
29 | *Create Time : 2019-02-18 14:50
30 | *Author Email: qianmoQ
31 | */ 32 | @RestController 33 | public class HelloController { 34 | 35 | @GetMapping(value = "/admin") 36 | @Secured("ROLE_ADMIN") 37 | public String admin() { 38 | return "Admin"; 39 | } 40 | 41 | @GetMapping("/user") 42 | @Secured("ROLE_USER") 43 | public String user() { 44 | return "User"; 45 | } 46 | 47 | } -------------------------------------------------------------------------------- /src/main/java/com/edurt/sski/controller/package-info.java: -------------------------------------------------------------------------------- 1 | package com.edurt.sski.controller; -------------------------------------------------------------------------------- /src/main/java/com/edurt/sski/package-info.java: -------------------------------------------------------------------------------- 1 | package com.edurt.sski; -------------------------------------------------------------------------------- /src/main/resources/application.properties: -------------------------------------------------------------------------------- 1 | server.port=9002 2 | keycloak.realm=springboot-security-keycloak-integration 3 | keycloak.bearer-only=true 4 | keycloak.auth-server-url=http://localhost:9001/auth 5 | keycloak.ssl-required=external 6 | keycloak.resource=springboot-security-keycloak-integration-client 7 | keycloak.use-resource-role-mappings=true 8 | keycloak.principal-attribute=preferred_username --------------------------------------------------------------------------------