├── .gitignore
├── src
    └── main
    │   ├── resources
    │       └── config
    │       │   └── application.yml
    │   └── java
    │       └── com
    │           └── github
    │               └── oauth2
    │                   └── client
    │                       ├── ResourceServerConfig.java
    │                       └── ClientApplication.java
├── nbactions.xml
├── README.md
└── pom.xml


/.gitignore:
--------------------------------------------------------------------------------
 1 | target/
 2 | !.mvn/wrapper/maven-wrapper.jar
 3 | 
 4 | ### STS ###
 5 | .apt_generated
 6 | .classpath
 7 | .factorypath
 8 | .project
 9 | .settings
10 | .springBeans
11 | 
12 | ### IntelliJ IDEA ###
13 | .idea
14 | *.iws
15 | *.iml
16 | *.ipr
17 | 
18 | ### NetBeans ###
19 | nbproject/private/
20 | build/
21 | nbbuild/
22 | dist/
23 | nbdist/
24 | .nb-gradle/
25 | 
26 | ### VS Code ###
27 | .vscode
28 | 


--------------------------------------------------------------------------------
/src/main/resources/config/application.yml:
--------------------------------------------------------------------------------
 1 | spring:
 2 |     application:
 3 |         name: spring-boot-oauth2-client
 4 |     mvc:
 5 |         favicon:
 6 |             enabled: false
 7 |         throw-exception-if-no-handler-found: true
 8 |     main:
 9 |         banner-mode: 'off'
10 | security:
11 |     oauth2:
12 |         resource:
13 |             filter-order: 3
14 |         client:
15 |             authenticationScheme: header
16 | logging:
17 |     level:
18 |     # org.springframework.security: DEBUG
19 | 
20 | server:
21 |     port: 8081
22 |     error:
23 |         whitelabel:
24 |             enabled: false


--------------------------------------------------------------------------------
/nbactions.xml:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8"?>
 2 | <actions>
 3 |         <action>
 4 |             <actionName>run</actionName>
 5 |             <packagings>
 6 |                 <packaging>jar</packaging>
 7 |             </packagings>
 8 |             <goals>
 9 |                 <goal>process-classes</goal>
10 |                 <goal>org.codehaus.mojo:exec-maven-plugin:1.2.1:exec</goal>
11 |             </goals>
12 |             <properties>
13 |                 <exec.args>-classpath %classpath com.github.oauth2.client.ClientApplication</exec.args>
14 |                 <exec.executable>java</exec.executable>
15 |             </properties>
16 |         </action>
17 |     </actions>
18 | 


--------------------------------------------------------------------------------
/src/main/java/com/github/oauth2/client/ResourceServerConfig.java:
--------------------------------------------------------------------------------
 1 | /*
 2 |  * To change this license header, choose License Headers in Project Properties.
 3 |  * To change this template file, choose Tools | Templates
 4 |  * and open the template in the editor.
 5 |  */
 6 | package com.github.oauth2.client;
 7 | 
 8 | import org.springframework.context.annotation.Configuration;
 9 | import org.springframework.security.config.annotation.web.builders.HttpSecurity;
10 | import org.springframework.security.oauth2.config.annotation.web.configuration.EnableResourceServer;
11 | import org.springframework.security.oauth2.config.annotation.web.configuration.ResourceServerConfigurerAdapter;
12 | import org.springframework.security.oauth2.config.annotation.web.configurers.ResourceServerSecurityConfigurer;
13 | 
14 | /**
15 |  *
16 |  * @author Aldwin Delgado
17 |  */
18 | @Configuration
19 | @EnableResourceServer
20 | public class ResourceServerConfig extends ResourceServerConfigurerAdapter {
21 | 
22 |     @Override
23 |     public void configure(HttpSecurity http) throws Exception {
24 |         http
25 |                 .headers().frameOptions().disable()
26 |                 .and()
27 |                 .csrf().disable()
28 |                 .authorizeRequests()
29 |                 .anyRequest()
30 |                 .authenticated();
31 |     }
32 | 
33 |     @Override
34 |     public void configure(ResourceServerSecurityConfigurer resources) throws Exception {
35 |         resources.resourceId("sample-oauth");
36 |     }
37 | 
38 | }
39 | 


--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
 1 | Sample standalone OAuth2 resource server for Spring Boot (Client)
 2 | 
 3 | The requesting method for token supports both ```json format``` and ```url-encoded format```
 4 | 
 5 | 
 6 | The token validity is currently 60secs.
 7 | 
 8 | 
 9 | Update any of the ```clienId```/```clientPassword```/```tokenValidity``` to however you want.
10 | 
11 | ## Other implementations
12 | * Using [JDBC](https://github.com/aldwindelgado/spring-boot-oauth2-client/tree/jdbc) with default token
13 | * Using [JDBC with JWT](https://github.com/aldwindelgado/spring-boot-oauth2-client/tree/jwt) as the token
14 | 
15 | ## Running
16 | ```shell
17 | mvn clean package spring-boot:run
18 | ```
19 | 
20 | ## Request for a token 
21 | Use any of the curl commands to request an access token.
22 | 
23 | #### Using URL-Encoded Format
24 | ```
25 | curl -X POST -H "Authorization: Basic YWNjb3VudDpwYXNzd29yZA=="  -H "Content-Type: application/x-www-form-urlencoded" -v localhost:8080/oauth/token?grant_type=client_credentials
26 | ```
27 | #### Using JSON Format
28 | ```
29 | curl -X POST -H "Authorization: Basic YWNjb3VudDpwYXNzd29yZA=="  -H "Content-Type: application/json" -d '{ "grant_type": "client_credentials" }' -v localhost:8080/oauth/token
30 | ```
31 | ## Using token to protected resource
32 | ```
33 | curl -H "Authorization: Bearer <access token>" -v localhost:8081
34 | ```
35 | ## Authorization Server
36 | See [spring-boot-oauth2-server](https://github.com/aldwindelgado/spring-boot-oauth2-server) for running the oauth-server (authorization server)
37 | 


--------------------------------------------------------------------------------
/src/main/java/com/github/oauth2/client/ClientApplication.java:
--------------------------------------------------------------------------------
 1 | /*
 2 |  * To change this license header, choose License Headers in Project Properties.
 3 |  * To change this template file, choose Tools | Templates
 4 |  * and open the template in the editor.
 5 |  */
 6 | package com.github.oauth2.client;
 7 | 
 8 | import org.springframework.boot.SpringApplication;
 9 | import org.springframework.boot.autoconfigure.SpringBootApplication;
10 | import org.springframework.context.annotation.Bean;
11 | import org.springframework.http.HttpStatus;
12 | import org.springframework.http.MediaType;
13 | import org.springframework.http.ResponseEntity;
14 | import org.springframework.security.authentication.AuthenticationManager;
15 | import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
16 | import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
17 | import org.springframework.security.oauth2.config.annotation.web.configuration.EnableResourceServer;
18 | import org.springframework.security.oauth2.provider.authentication.OAuth2AuthenticationManager;
19 | import org.springframework.security.oauth2.provider.token.RemoteTokenServices;
20 | import org.springframework.security.oauth2.provider.token.ResourceServerTokenServices;
21 | import org.springframework.web.bind.annotation.RequestMapping;
22 | import org.springframework.web.bind.annotation.RestController;
23 | 
24 | /**
25 |  *
26 |  * @author Aldwin Delgado
27 |  */
28 | @SpringBootApplication
29 | @EnableResourceServer
30 | @EnableWebSecurity
31 | @RestController
32 | public class ClientApplication extends WebSecurityConfigurerAdapter {
33 | 
34 |     public static void main(String[] args) {
35 |         SpringApplication.run(ClientApplication.class, args);
36 |     }
37 | 
38 |     @RequestMapping(
39 |             value = "/",
40 |             produces = MediaType.APPLICATION_JSON_VALUE
41 |     )
42 |     public ResponseEntity<String> index() {
43 |         return new ResponseEntity<>("{\"message\":\"Congrats, on unlocking the secret!\"}", HttpStatus.OK);
44 |     }
45 | 
46 |     @RequestMapping(
47 |             value = "/users",
48 |             produces = MediaType.APPLICATION_JSON_VALUE
49 |     )
50 |     public ResponseEntity<String> anotherOne() {
51 |         return new ResponseEntity<>("{\"message\":\"This is users page?\"}", HttpStatus.OK);
52 |     }
53 | 
54 |     @Bean
55 |     public ResourceServerTokenServices tokenServices() {
56 |         RemoteTokenServices tokenServices = new RemoteTokenServices();
57 |         tokenServices.setClientId("account");
58 |         tokenServices.setClientSecret("password");
59 |         tokenServices.setCheckTokenEndpointUrl("http://localhost:8080/oauth/check_token");
60 |         return tokenServices;
61 |     }
62 | 
63 |     @Override
64 |     public AuthenticationManager authenticationManagerBean() throws Exception {
65 |         OAuth2AuthenticationManager authenticationManager = new OAuth2AuthenticationManager();
66 |         authenticationManager.setTokenServices(tokenServices());
67 |         return authenticationManager;
68 |     }
69 | 
70 | }
71 | 


--------------------------------------------------------------------------------
/pom.xml:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8"?>
 2 | <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
 3 |     <modelVersion>4.0.0</modelVersion>
 4 |     <groupId>com.github</groupId>
 5 |     <artifactId>spring-boot-oauth2-client</artifactId>
 6 |     <version>1.0.0</version>
 7 |     
 8 |     <name>spring-boot-oauth2-client</name>
 9 |     <description>Sample OAuth2 resource server using Spring Boot</description>
10 |     
11 |     <parent>
12 |         <groupId>org.springframework.boot</groupId>
13 |         <artifactId>spring-boot-starter-parent</artifactId>
14 |         <version>1.5.6.RELEASE</version>
15 |     </parent>
16 |     
17 |     <properties>
18 |         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
19 |         <project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
20 |         <java.version>1.8</java.version>
21 |     </properties>
22 | 
23 |     <dependencies>
24 |         <dependency>
25 |             <groupId>org.springframework.boot</groupId>
26 |             <artifactId>spring-boot-starter-web</artifactId>
27 |         </dependency>  
28 |         <dependency>
29 |             <groupId>org.springframework.boot</groupId>
30 |             <artifactId>spring-boot-starter</artifactId>
31 |             <exclusions>
32 |                 <exclusion>
33 |                     <groupId>org.springframework.boot</groupId>
34 |                     <artifactId>spring-boot-starter-logging</artifactId>
35 |                 </exclusion>
36 |             </exclusions>
37 |         </dependency>
38 |         <dependency>
39 |             <groupId>org.springframework.boot</groupId>
40 |             <artifactId>spring-boot-starter-log4j2</artifactId>
41 |         </dependency>
42 |         <dependency>
43 |             <groupId>org.springframework.security.oauth</groupId>
44 |             <artifactId>spring-security-oauth2</artifactId>
45 |         </dependency>
46 |         <dependency>
47 |             <groupId>org.springframework.boot</groupId>
48 |             <artifactId>spring-boot-starter-actuator</artifactId>
49 |         </dependency>
50 |         <dependency>
51 |             <groupId>org.springframework.boot</groupId>
52 |             <artifactId>spring-boot-starter-security</artifactId>
53 |         </dependency>
54 |         <dependency>
55 |             <groupId>org.apache.commons</groupId>
56 |             <artifactId>commons-lang3</artifactId>
57 |             <version>3.1</version>
58 |             <type>jar</type>
59 |         </dependency>
60 |         <dependency>
61 |             <groupId>javax.ws.rs</groupId>
62 |             <artifactId>javax.ws.rs-api</artifactId>
63 |             <version>2.0</version>
64 |             <type>jar</type>
65 |         </dependency>
66 |         <dependency>
67 |             <groupId>org.json</groupId>
68 |             <artifactId>json</artifactId>
69 |             <version>20160810</version>
70 |             <type>jar</type>
71 |         </dependency>
72 |         <dependency>
73 |             <groupId>org.apache.commons</groupId>
74 |             <artifactId>commons-exec</artifactId>
75 |             <version>1.3</version>
76 |             <type>jar</type>
77 |         </dependency>
78 |     </dependencies>
79 |        
80 |     <build>
81 |         <plugins>
82 |             <plugin>
83 |                 <groupId>org.springframework.boot</groupId>
84 |                 <artifactId>spring-boot-maven-plugin</artifactId>
85 |             </plugin>
86 |         </plugins>
87 |     </build>
88 | </project>


--------------------------------------------------------------------------------