Spring Security OAuth - Пользовательские UserDetailsService никогда не вызывался

Question

весна-security.xml

<?xml version="1.0" encoding="UTF-8" ?> 
<beans 
    xmlns="http://www.springframework.org/schema/beans" 
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 
    xmlns:oauth="http://www.springframework.org/schema/security/oauth2" 
    xmlns:context="http://www.springframework.org/schema/context" 
    xmlns:sec="http://www.springframework.org/schema/security" 
    xmlns:mvc="http://www.springframework.org/schema/mvc" 
    xsi:schemaLocation=" 
http://www.springframework.org/schema/security/oauth2 http://www.springframework.org/schema/security/spring-security-oauth2-2.0.xsd 
http://www.springframework.org/schema/mvc http://www.springframework.org/schema/mvc/spring-mvc-3.2.xsd 
http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security-4.1.xsd 
http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-4.1.xsd 
http://www.springframework.org/schema/context http://www.springframework.org/schema/context/spring-context-4.1.xsd "> 

    <!-- Default url to get a token from OAuth --> 
    <http pattern="/api/oauth/token" create-session="stateless" authentication-manager-ref="clientAuthenticationManager" xmlns="http://www.springframework.org/schema/security"> 

    <csrf disabled="true"/> 
    <intercept-url pattern="/api/oauth/token" access="isFullyAuthenticated()"/> 
    <anonymous enabled="false"/> 
    <http-basic entry-point-ref="clientAuthenticationEntryPoint"/> 

    <custom-filter ref="clientCredentialsTokenEndpointFilter" after="BASIC_AUTH_FILTER"/> 
    <access-denied-handler ref="oauthAccessDeniedHandler"/> 
    </http> 

    <!-- Protected sources --> 
    <http pattern="/api/services/**" create-session="never" entry-point-ref="oauthAuthenticationEntryPoint" access-decision-manager-ref="accessDecisionManager" xmlns="http://www.springframework.org/schema/security" use-expressions="true"> 
    <anonymous enabled="false"/> 
    <intercept-url pattern="/api/**" access="hasRole('ROLE_APP')"/> 
    <custom-filter ref="resourceServerFilter" before="PRE_AUTH_FILTER"/> 
    <access-denied-handler ref="oauthAccessDeniedHandler"/> 
    </http> 

    <bean id="clientCredentialsTokenEndpointFilter" class="org.springframework.security.oauth2.provider.client.ClientCredentialsTokenEndpointFilter"> 
    <property name="authenticationManager" ref="clientAuthenticationManager"/> 
    </bean> 

    <bean id="accessDecisionManager" class="org.springframework.security.access.vote.UnanimousBased" xmlns="http://www.springframework.org/schema/beans"> 
    <constructor-arg> 
     <list> 
     <bean class="org.springframework.security.oauth2.provider.vote.ScopeVoter"/> 
     <bean class="org.springframework.security.access.vote.RoleVoter"/> 
     <bean class="org.springframework.security.web.access.expression.WebExpressionVoter"/> 
     </list> 
    </constructor-arg> 
    </bean> 

    <authentication-manager id="clientAuthenticationManager" xmlns="http://www.springframework.org/schema/security"> 
    <authentication-provider user-service-ref="clientDetailsUserService"/> 
    </authentication-manager> 

    <sec:authentication-manager> 
    <sec:authentication-provider user-service-ref='userDetailsServiceImpl'/> 
    </sec:authentication-manager> 

    <bean id="clientDetailsUserService" class="org.springframework.security.oauth2.provider.client.ClientDetailsUserDetailsService"> 
    <constructor-arg ref="clientDetails"/> 
    </bean> 

    <authentication-manager alias="authenticationManager" xmlns="http://www.springframework.org/schema/security"> 
    <authentication-provider user-service-ref="userDetailsServiceImpl"></authentication-provider> 
    </authentication-manager> 

    <!-- Token store --> 
    <bean id="tokenStore" class="org.springframework.security.oauth2.provider.token.store.JdbcTokenStore"> 
    <constructor-arg ref="dataSource"/> 
    </bean> 

    <bean id="tokenServices" class="org.springframework.security.oauth2.provider.token.DefaultTokenServices"> 
    <property name="tokenStore" ref="tokenStore"/> 
    <property name="supportRefreshToken" value="true"/> 
    <property name="accessTokenValiditySeconds" value="120"/> 
    <property name="clientDetailsService" ref="clientDetails"/> 
    </bean> 

    <bean id="oAuth2RequestFactory" class="org.springframework.security.oauth2.provider.request.DefaultOAuth2RequestFactory"> 
    <constructor-arg ref="clientDetails"/> 
    </bean> 

    <bean id="userApprovalHandler" class="org.springframework.security.oauth2.provider.approval.TokenStoreUserApprovalHandler"> 
    <property name="tokenStore" ref="tokenStore"/> 
    <property name="requestFactory" ref="oAuth2RequestFactory"/> 
    </bean> 

    <bean id="oauthAuthenticationEntryPoint" class="org.springframework.security.oauth2.provider.error.OAuth2AuthenticationEntryPoint"> 
    <property name="realmName" value="test/client"/> 
    <property name="typeName" value="Basic"/> 
    </bean> 

    <bean id="clientAuthenticationEntryPoint" class="org.springframework.security.oauth2.provider.error.OAuth2AuthenticationEntryPoint"> 
    <property name="realmName" value="test/client"/> 
    <property name="typeName" value="Basic"/> 
    </bean> 

    <bean id="oauthAccessDeniedHandler" class="org.springframework.security.oauth2.provider.error.OAuth2AccessDeniedHandler"/> 

    <oauth:authorization-server client-details-service-ref="clientDetails" token-services-ref="tokenServices" user-approval-handler-ref="userApprovalHandler"> 
    <oauth:authorization-code/> 
    <oauth:implicit/> 
    <oauth:refresh-token/> 
    <oauth:client-credentials/> 
    <oauth:password/> 
    </oauth:authorization-server> 

    <oauth:resource-server id="resourceServerFilter" resource-id="test" token-services-ref="tokenServices"/> 

    <bean id="clientDetails" class="com.xxxxxx.service.ClientService"></bean> 

    <sec:global-method-security pre-post-annotations="enabled" proxy-target-class="true"> 
    <sec:expression-handler ref="oauthExpressionHandler"/> 
    </sec:global-method-security> 

    <oauth:expression-handler id="oauthExpressionHandler"/> 
    <oauth:web-expression-handler id="oauthWebExpressionHandler"/> 
</beans> 

UserServiceImpl

@Service 
public class UserDetailsServiceImpl implements UserDetailsService { 

    @Autowired 
    private OauthRepository oauthRepository; 

    @Override 
    public UserDetails loadUserByUsername(String s) throws UsernameNotFoundException { 
     User user = oauthRepository.getByUsername(s); 
     return user; 
    } 

} 

ClientServiceImpl

@Component 
public class ClientService implements ClientDetailsService { 

    @Autowired 
    private OauthRepository oauthRepository; 

    @Override 
    public ClientDetails loadClientByClientId(String s) throws ClientRegistrationException { 
     BaseClientDetails clientDetails = oauthRepository.getByClientId(s); 
     return clientDetails; 
    } 
} 

Я много искал, но не могу понять, почему UserServiceImpl не вызывается. Я debbuged и всегда ClientServiceImpl вызывается для извлечения для клиентов и пользователей. После отправки запроса на /api/oauth/token, с соответствующими параметрами (пользователя и клиента, хранящихся в базе данных), я получаю:

{"error":"unauthorized","error_description":"Incorrect result size: expected 1, actual 0"} 

Я использую - Spring Framework 4.2.5.RELEASE - Spring Mvc 4.2.5 .RELEASE, - Spring Security 4.1.0.RC1, - Spring Security oauth2 2.0.9.RELEASE

Answer 1

Я думаю, что вы делаете хорошо, но в

@Service public class UserDetailsServiceImpl implements UserDetailsService 

Вы должны установить пароль пользователя и его роль.

Пожалуйста, смотрите здесь код

@Override 
public UserDetails loadUserByUsername(String username) 
     throws UsernameNotFoundException, DataAccessException 
{ 
    System.out.println("Getting access details from Database !!"); 

    // Ideally it should be fetched from database and populated instance of 
    // #org.springframework.security.core.userdetails.User should be returned from this method 
    UserDetails user = new User(username, "password", true, true, true, true, new GrantedAuthority[]{ new GrantedAuthorityImpl("ROLE_USER") }); 
    return user; 
} 

интерфейс UserDetailsService используется для задачи поиска имя пользователя, пароль и GrantedAuthorities для данного пользователя. Этот интерфейс предоставляет только один метод, который должен реализовать реализующий класс.

Answer 2

я решил его со следующими изменениями в весенне-security.xml:

<!-- Default url to get a token from OAuth --> 
<http pattern="/api/oauth/token" create-session="stateless" 
     authentication-manager-ref="authenticationManager" 
         : 

    <authentication-manager id="clientAuthenticationManager" xmlns="http://www.springframework.org/schema/security"> 
    <authentication-provider user-service-ref="userDetailsServiceImpl"/> 
</authentication-manager> 

Я думаю, у меня было два экземпляра Ф.О. authenticationMangager. Спасибо, в любом случае.