Password Grant 타입 추가

Author: cheese10yun

http/api.http

@@ -17,12 +17,25 @@ POST http://localhost:8080/oauth/token
 Content-Type: application/x-www-form-urlencoded
 Authorization: Basic Y2xpZW50OnBhc3N3b3Jk
 
-code=EzNA97&grant_type=authorization_code&redirect_uri=http%3A%2F%2Flocalhost%3A9000%2Fcallback&scope=read_profile
+code=lg8HLw&grant_type=authorization_code&redirect_uri=http%3A%2F%2Flocalhost%3A9000%2Fcallback&scope=read_profile
+###
+
+#
+GET http://localhost:8080/oauth/authorize?client_id=client&redirect_uri=http://localhost:9000/callback&response_type=token&scope=read_profile&state=test
+Accept: application/json
+###
+
+# Password Grant Type 토큰 요청
+POST http://localhost:8080/oauth/token
+Content-Type: application/x-www-form-urlencoded
+Authorization: Basic Y2xpZW50OnBhc3N3b3Jk
+
+username=user&password=pass&grant_type=password&scope=read_profile
 ###
 
 
 GET http://localhost:8080/api/session
 Accept: application/json
-Authorization: Bearer 623d5bc4-7172-44ae-85c1-73a297e6ab04
+Authorization: Bearer 29834bce-859b-4279-b01e-76aa21465879
 
 ###

src/main/java/com/example/oauth2/config/AuthorizationServerConfig.java

@@ -1,23 +1,42 @@
 package com.example.oauth2.config;
 
+import lombok.AllArgsConstructor;
 import org.springframework.context.annotation.Configuration;
 import org.springframework.security.oauth2.config.annotation.configurers.ClientDetailsServiceConfigurer;
 import org.springframework.security.oauth2.config.annotation.web.configuration.AuthorizationServerConfigurerAdapter;
 import org.springframework.security.oauth2.config.annotation.web.configuration.EnableAuthorizationServer;
+import org.springframework.security.oauth2.config.annotation.web.configurers.AuthorizationServerEndpointsConfigurer;
+import org.springframework.security.authentication.AuthenticationManager;
 
 @Configuration
 @EnableAuthorizationServer
+@AllArgsConstructor
 public class AuthorizationServerConfig extends AuthorizationServerConfigurerAdapter {
 
+    private final AuthenticationManager authenticationManager;
+
     @Override
     public void configure(ClientDetailsServiceConfigurer clients) throws Exception {
         clients
                 .inMemory()
                 .withClient("client")
                 .secret("{bcrypt}$2a$10$iP9ejueOGXO29.Yio7rqeuW9.yOC4YaV8fJp3eIWbP45eZSHFEwMG")  // password
                 .redirectUris("http://localhost:9000/callback")
-                .authorizedGrantTypes("authorization_code", "implicit")
+                .authorizedGrantTypes("authorization_code", "implicit", "password")
                 .accessTokenValiditySeconds(120)
+                .refreshTokenValiditySeconds(240)
                 .scopes("read_profile");
     }
+
+
+    @Override
+    public void configure(AuthorizationServerEndpointsConfigurer endpoints) {
+        //@formatter:off
+        endpoints
+                .authenticationManager(authenticationManager)
+        ;
+        //@formatter:on
+    }
+
+
 }

src/main/java/com/example/oauth2/config/SecurityConfig.java

@@ -1,7 +1,10 @@
 package com.example.oauth2.config;
 
 import lombok.AllArgsConstructor;
+import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.context.annotation.Bean;
+import org.springframework.security.authentication.AuthenticationManager;
+import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
 import org.springframework.security.config.annotation.web.builders.HttpSecurity;
 import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
 import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
@@ -27,4 +30,22 @@ protected void configure(HttpSecurity http) throws Exception {
     public PasswordEncoder encoder() {
         return PasswordEncoderFactories.createDelegatingPasswordEncoder();
     }
+
+
+    @Bean
+    @Override
+    protected AuthenticationManager authenticationManager() throws Exception {
+        return super.authenticationManager();
+    }
+
+    @Autowired
+    public void configureGlobal(AuthenticationManagerBuilder auth) throws Exception {
+        //@formatter:off
+        auth
+                .inMemoryAuthentication()
+                .withUser("user").password("{noop}pass").roles("USER");
+        //@formatter:on
+
+    }
+
 }

src/main/resources/application.yml

@@ -28,7 +28,3 @@ spring:
     initialization-mode: always
     platform: oauth2
 
-  security:
-    user:
-      name: user
-      password: "{noop}pass"