Oauth2 访问oauth/authorize/**出现 403

Posted 2022-03-14 _DiMinisH

问题: Oauth2 访问oauth/authorize/**出现 403

访问的url

http://localhost:8080/oauth/authorize?response_type=code&client_id=client&redirect_uri=http://www.baidu.com&scope=all

解决方案

修改继承WebSecurityConfigurerAdapter类中的protected void configure(HttpSecurity http)方法

旧的

@Configuration
@EnableWebSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter 

    @Bean
    public PasswordEncoder passwordEncoder () 
        return new BCryptPasswordEncoder();
    

    @Override
    protected void configure(HttpSecurity http) throws Exception 
        http.authorizeRequests(request ->
                request.antMatchers("/oauth/**", "/login/**", "/logout/**")
                        .permitAll()
                        .anyRequest().authenticated()
        ).csrf(AbstractHttpConfigurer::disable);

    

新的

@Configuration
@EnableWebSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter 

    @Bean
    public PasswordEncoder passwordEncoder () 
        return new BCryptPasswordEncoder();
    

    @Override
    protected void configure(HttpSecurity http) throws Exception 
        http.formLogin().and().authorizeRequests(request ->
                request.antMatchers("/oauth/**", "/login/**", "/logout/**")
                        .permitAll()
                        .anyRequest().authenticated()
        ).csrf(AbstractHttpConfigurer::disable);