├── .gitignore
├── security-1
    ├── .gitignore
    ├── src
    │   └── main
    │   │   ├── resources
    │   │       └── application.yml
    │   │   └── java
    │   │       └── com
    │   │           └── itmuch
    │   │               └── study
    │   │                   └── SecurityApplication.java
    └── pom.xml
└── pom.xml


/.gitignore:
--------------------------------------------------------------------------------
1 | .idea
2 | target/
3 | .mvn
4 | *.iml
5 | DS_Store
6 | 


--------------------------------------------------------------------------------
/security-1/.gitignore:
--------------------------------------------------------------------------------
 1 | target/
 2 | !.mvn/wrapper/maven-wrapper.jar
 3 | 
 4 | ### STS ###
 5 | .apt_generated
 6 | .classpath
 7 | .factorypath
 8 | .project
 9 | .settings
10 | .springBeans
11 | 
12 | ### IntelliJ IDEA ###
13 | .idea
14 | .mvn
15 | *.iws
16 | *.iml
17 | *.ipr
18 | 
19 | ### NetBeans ###
20 | nbproject/private/
21 | build/
22 | nbbuild/
23 | dist/
24 | nbdist/
25 | .nb-gradle/


--------------------------------------------------------------------------------
/security-1/src/main/resources/application.yml:
--------------------------------------------------------------------------------
 1 | server:
 2 |   port: 8080
 3 | security:
 4 |   user:
 5 |     password: user  # 直接登录时的密码
 6 |   ignored: /
 7 |   sessions: never   # session策略
 8 | 
 9 |   oauth2:
10 |     sso:
11 |       loginPath: /login   # 登录路径
12 |     client:
13 |       clientId: dec027c4d1abbbf727c8
14 |       clientSecret: 23ddbe1711bbc9e141e45ff51ab3270de8ae1c9d
15 |       accessTokenUri: https://github.com/login/oauth/access_token
16 |       userAuthorizationUri: https://github.com/login/oauth/authorize
17 |     resource:
18 |       userInfoUri: https://api.github.com/user
19 |       preferTokenInfo: false
20 | 


--------------------------------------------------------------------------------
/security-1/pom.xml:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8"?>
 2 | <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
 3 | 	<modelVersion>4.0.0</modelVersion>
 4 | 
 5 | 	<groupId>com.itmuch.study</groupId>
 6 | 	<artifactId>security-1</artifactId>
 7 | 	<version>0.0.10-SNAPSHOT</version>
 8 | 	<packaging>jar</packaging>
 9 | 
10 | 	<name>security-1</name>
11 | 	<description>Spring Cloud Security示例</description>
12 | 
13 | 	<parent>
14 | 		<groupId>com.itmuch.study</groupId>
15 | 		<artifactId>spring-cloud-security-samples</artifactId>
16 | 		<version>0.0.10-SNAPSHOT</version>
17 | 	</parent>
18 | 
19 | 
20 | 	<properties>
21 | 		<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
22 | 		<project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
23 | 		<java.version>1.8</java.version>
24 | 	</properties>
25 | 
26 | 	<dependencies>
27 | 		<dependency>
28 | 			<groupId>org.springframework.cloud</groupId>
29 | 			<artifactId>spring-cloud-starter-oauth2</artifactId>
30 | 		</dependency>
31 | 		<dependency>
32 | 			<groupId>org.springframework.cloud</groupId>
33 | 			<artifactId>spring-cloud-starter-security</artifactId>
34 | 		</dependency>
35 | 	</dependencies>
36 | 	<dependencyManagement>
37 | 		<dependencies>
38 | 			<dependency>
39 | 				<groupId>org.springframework.cloud</groupId>
40 | 				<artifactId>spring-cloud-dependencies</artifactId>
41 | 				<version>Camden.SR5</version>
42 | 				<type>pom</type>
43 | 				<scope>import</scope>
44 | 			</dependency>
45 | 		</dependencies>
46 | 	</dependencyManagement>
47 | 
48 | 	<build>
49 | 		<plugins>
50 | 			<plugin>
51 | 				<groupId>org.springframework.boot</groupId>
52 | 				<artifactId>spring-boot-maven-plugin</artifactId>
53 | 			</plugin>
54 | 		</plugins>
55 | 	</build>
56 | 
57 |   <scm>
58 |     <tag>spring-cloud-security-samples-0.0.6</tag>
59 |   </scm>
60 | </project>
61 | 


--------------------------------------------------------------------------------
/pom.xml:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8"?>
 2 | <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
 3 | 	<modelVersion>4.0.0</modelVersion>
 4 | 
 5 | 	<groupId>com.itmuch.study</groupId>
 6 | 	<artifactId>spring-cloud-security-samples</artifactId>
 7 | 	<version>0.0.10-SNAPSHOT</version>
 8 | 	<packaging>pom</packaging>
 9 | 
10 |     <parent>
11 |         <groupId>org.springframework.boot</groupId>
12 |         <artifactId>spring-boot-starter-parent</artifactId>
13 |         <version>1.5.2.RELEASE</version>
14 |         <relativePath />
15 |     </parent>
16 | 
17 | 	<modules>
18 | 		<module>security-1</module>
19 | 		<!--<module>security-2</module>-->
20 | 	</modules>
21 | 	<properties>
22 | 		<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
23 | 		<project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
24 | 		<java.version>1.8</java.version>
25 | 		<git.url>https://github.com/itmuch/spring-cloud-security-samples.git</git.url>
26 | 	</properties>
27 | 
28 | 	<scm>
29 | 		<connection>scm:git:${git.url}</connection>
30 | 		<developerConnection>scm:git:${git.url}</developerConnection>
31 | 		<url>${git.url}</url>
32 | 		<tag>spring-cloud-security-samples-0.0.6</tag>
33 | 	</scm>
34 | 	<distributionManagement>
35 |         <repository>
36 |             <id>Releases</id>
37 |             <name>Nexus Release Repository</name>
38 |             <url>http://localhost:8081/repository/maven-releases/</url>
39 |         </repository>
40 |         <snapshotRepository>
41 |             <id>Snapshots</id>
42 |             <name>Nexus Snapshot Repository</name>
43 |             <url>http://localhost:8081/repository/maven-snapshots/</url>
44 |         </snapshotRepository>
45 |     </distributionManagement>
46 | 
47 | 	<build>
48 | 		<plugins>
49 | 		<plugin>
50 | 				<groupId>org.apache.maven.plugins</groupId>
51 | 				<artifactId>maven-release-plugin</artifactId>
52 | 				<version>2.5.2</version>
53 | 				<configuration>
54 | 					<autoVersionSubmodules>true</autoVersionSubmodules>
55 | 				</configuration>
56 | 			</plugin>
57 | 		</plugins>
58 | 	</build>
59 | </project>
60 | 


--------------------------------------------------------------------------------
/security-1/src/main/java/com/itmuch/study/SecurityApplication.java:
--------------------------------------------------------------------------------
 1 | package com.itmuch.study;
 2 | 
 3 | import org.springframework.boot.SpringApplication;
 4 | import org.springframework.boot.autoconfigure.SpringBootApplication;
 5 | import org.springframework.boot.autoconfigure.security.oauth2.client.EnableOAuth2Sso;
 6 | import org.springframework.security.config.annotation.web.builders.HttpSecurity;
 7 | import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
 8 | import org.springframework.stereotype.Component;
 9 | import org.springframework.web.bind.annotation.GetMapping;
10 | import org.springframework.web.bind.annotation.RequestMapping;
11 | import org.springframework.web.bind.annotation.RestController;
12 | 
13 | import java.security.Principal;
14 | 
15 | @SpringBootApplication
16 | @RestController
17 | public class SecurityApplication {
18 |     public static void main(String[] args) {
19 |         SpringApplication.run(SecurityApplication.class, args);
20 |     }
21 | 
22 |     @GetMapping("/welcome")
23 |     public String welcome() {
24 |         return "welcome";
25 |     }
26 | 
27 |     @RequestMapping("/user")
28 |     public Principal user(Principal user) {
29 |         return user;
30 |     }
31 | 
32 |     @Component
33 |     @EnableOAuth2Sso // 实现基于OAuth2的单点登录，建议跟踪进代码阅读以下该注解的注释，很有用
34 |     public static class SecurityConfiguration extends WebSecurityConfigurerAdapter {
35 |         @Override
36 |         public void configure(HttpSecurity http) throws Exception {
37 |             http.
38 |                     antMatcher("/**")
39 |                     // 所有请求都得经过认证和授权
40 |                     .authorizeRequests().anyRequest().authenticated()
41 |                     .and().authorizeRequests().antMatchers("/","/anon").permitAll()
42 |                     .and()
43 |                     // 这里之所以要禁用csrf，是为了方便。
44 |                     // 否则，退出链接必须要发送一个post请求，请求还得带csrf token
45 |                     // 那样我还得写一个界面，发送post请求
46 |                     .csrf().disable()
47 |                     // 退出的URL是/logout
48 |                     .logout().logoutUrl("/logout").permitAll()
49 |                     // 退出成功后，跳转到/路径。
50 |                     .logoutSuccessUrl("/");
51 |         }
52 |     }
53 | }
54 | 


--------------------------------------------------------------------------------