是否可以使用 OidcUserRequest 获取刷新令牌？

Question

我在 Oauth2UserService 实现类中从 OidcUserRequest 加载 oidcUser。

@Override
    public OidcUser loadUser(OidcUserRequest userRequest) throws OAuth2AuthenticationException {
        OidcUser user = delegate.loadUser(userRequest);
        List<GrantedAuthority> rolesAsAuthorities = getRolesAsAuthorities(user);
        
        CustomOidcUserDetailsImpl customUser = new CustomOidcUserDetailsImpl(user, rolesAsAuthorities);
        customUser.setFullName(getFullName(user));
        customUser.setTelephone(getTelephone(user));
        customUser.setEmail(getEmail(user));
        return customUser;
    }

问题是我只能从 OidcUserRequest 获得 OauthAccessToken 和 IdToken。有没有办法在我的服务中获取 Oauth2RefreshToken？
如果我手动将 授权码 换成令牌，我会得到 id,access,refresh tokens。

Answer 1

    @Autowired
    private OAuth2AuthorizedClientService authorizedClientService;

    Authentication authentication =SecurityContextHolder.getContext().getAuthentication();
        OAuth2AuthorizedClient client = authorizedClientService
                .loadAuthorizedClient(
                        "wso2", // client registrationId
                        authentication.getName());
    Oauth2RefreshToken refreshToken = client.getRefreshtoken();