WebClient 代理配置不适用于 oAuth2

Question

我已经使用授权类型客户端凭据实现了 webclient 和 oAuth2。我必须使用代理访问局。但是webclient没有使用我配置的主机。

HttpClient httpClient = HttpClient.create()
.tcpConfiguration(tcpClient -> tcpClient.option(ChannelOption.CONNECT_TIMEOUT_MILLIS, connectionTimeout)
.doOnConnected(conn -> conn.addHandlerLast(new ReadTimeoutHandler(readTimeout, TimeUnit.MILLISECONDS)))
.proxy(proxy -> proxy.type(ProxyProvider.Proxy.HTTP).host(proxyHost).port(proxyPort)));

如果我用系统配置代理，它工作正常：

System.setProperty("proxyHost", "host);
System.setProperty("proxyPort", "8080");

但我不能在云端使用系统属性。请建议我一些解决方法或任何解决方案。

我遇到了以下异常： “org.springframework.security.oauth2.core.OAuth2AuthorizationException：[invalid_token_response] 尝试检索 OAuth 2.0 访问令牌响应时发生错误：\“https://tokenURL”的 POST 请求出现 I/O 错误：api.uat.equifax .com；嵌套异常是 java.net.UnknownHostException: resourseURL\r\n\tat org.springframework.security.oauth2.client.endpoint.DefaultClientCredentialsTokenResponseClient.getTokenResponse(DefaultClientCredentialsTokenResponseClient.java:79)\r \n\tat ...”

Answer 1

老问题，但它仍然是我们找到的第一个 stackoverflow 条目，所以我们决定document our solution。

我们偶然发现了同样的问题。 OAuth2AuthorizationException异常表示在授权请求过程中出现问题。在对 spring-security-oauth2-client 源进行了一些挖掘之后，我们发现授权请求使用的客户端与资源请求不同。您只需为资源客户端设置代理。

授权请求正在使用 RestTemplate。以下代码 sn-p 显示了我们如何创建一个使用代理的自定义 RestTemplate 并将其添加到我们的 OAuth2AuthorizedClientManager 中。

@Bean 
public OAuth2AuthorizedClientManager authorizedClientManager( 
    final ClientRegistrationRepository clientRegistrationRepository, 
    final OAuth2AuthorizedClientService authorizedClientService) { 
 
    // Create RestTemplate that will be used for the authorization request
    // It's mandatory to add FormHttpMessageConverter and OAuth2AccessTokenResponseHttpMessageConverter
    // See javadoc from DefaultClientCredentialsTokenResponseClient.setRestOperations(RestOperations restOperations)
    // for further information
    RestTemplate restTemplate = new RestTemplate( 
        Arrays.asList(new FormHttpMessageConverter(), new OAuth2AccessTokenResponseHttpMessageConverter())); 
    restTemplate.setErrorHandler(new OAuth2ErrorResponseErrorHandler()); 
 
 
    // set up proxy for RestTemplate
    final HttpClientBuilder clientBuilder = HttpClientBuilder.create(); 
    clientBuilder.useSystemProperties(); 
    clientBuilder.setProxy(new HttpHost(proxyConfigDO.getHost(), proxyConfigDO.getPort())); 
 
    final CredentialsProvider credsProvider = new BasicCredentialsProvider(); 
    credsProvider.setCredentials( 
        new AuthScope(proxyConfigDO.getHost(), proxyConfigDO.getPort()), 
        new UsernamePasswordCredentials(proxyConfigDO.getUser(), proxyConfigDO.getPassword())); 
    clientBuilder.setDefaultCredentialsProvider(credsProvider); 
    clientBuilder.setProxyAuthenticationStrategy(new ProxyAuthenticationStrategy()); 
 
    final CloseableHttpClient client = clientBuilder.build(); 
    final HttpComponentsClientHttpRequestFactory factory = new HttpComponentsClientHttpRequestFactory(); 
    factory.setHttpClient(client); 
 
    restTemplate.setRequestFactory(new BufferingClientHttpRequestFactory(factory)); 
 
    // Create new client and pass our custom resttemplate 
    final var tokenResponseClient = new DefaultClientCredentialsTokenResponseClient(); 
    tokenResponseClient.setRestOperations(restTemplate); 
 
    // Create ClientCredentialsOAuth2AuthorizedClientProvider and override default setAccessTokenResponseClient
    // with the one we created in this method
    final var authorizedClientProvider = new ClientCredentialsOAuth2AuthorizedClientProvider(); 
    authorizedClientProvider.setAccessTokenResponseClient(tokenResponseClient); 
 
    final var authorizedClientManager = 
        new AuthorizedClientServiceOAuth2AuthorizedClientManager( 
            clientRegistrationRepository, authorizedClientService); 
    authorizedClientManager.setAuthorizedClientProvider(authorizedClientProvider); 
 
    return authorizedClientManager; 
}