使用oauth实现sso

@Configuration
@EnableAuthorizationServer
public class OAuth2AuthorizationServerConfig extends AuthorizationServerConfigurerAdapter {

    @Autowired
    private PasswordEncoder passwordEncoder;
    @Autowired
    private MongoClientDetailsService mongoClientDetailsService;
    @Autowired
    MongoTokenStore mongoTokenStore;
    @Autowired
    MongoAuthorizationCodeService mongoAuthorizationCodeService;

    @Autowired
    RoleUserApprovalHandler userApprovalHandler;
    
    @Autowired
    private MongoUserDetailsService mongoUserDetailsService;

    @Override
    public void configure(AuthorizationServerSecurityConfigurer security) throws Exception {
        security.allowFormAuthenticationForClients()
                .passwordEncoder(passwordEncoder)
                .checkTokenAccess("permitAll()");
//                .checkTokenAccess("isAuthenticated()");
    }

    @Override
    public void configure(ClientDetailsServiceConfigurer clients) throws Exception {
        clients.withClientDetails(mongoClientDetailsService);
    }

    @Override
    public void configure(AuthorizationServerEndpointsConfigurer endpoints) throws Exception {
        endpoints.tokenStore(mongoTokenStore)
                .authorizationCodeServices(mongoAuthorizationCodeService)
                .userApprovalHandler(userApprovalHandler)
                .authenticationManager(createPreAuthProvider())
                .userDetailsService(mongoUserDetailsService);
        endpoints.tokenServices(defaultTokenServices());
        super.configure(endpoints);
    }

    @Bean
    public DefaultTokenServices defaultTokenServices() {
        DefaultTokenServices defaultTokenServices = new DefaultTokenServices();
        defaultTokenServices.setTokenStore(mongoTokenStore);
        defaultTokenServices.setClientDetailsService(mongoClientDetailsService);
        // 避坑指南：https://www.cnblogs.com/luas/p/12118694.html
        // solution：https://stackoverflow.com/questions/34716636/no-authenticationprovider-found-on-refresh-token-spring-oauth2-java-config
        defaultTokenServices.setAuthenticationManager(createPreAuthProvider());
        defaultTokenServices.setSupportRefreshToken(true);
        defaultTokenServices.setReuseRefreshToken(true);
        return defaultTokenServices;
    }

    private ProviderManager createPreAuthProvider() {
        PreAuthenticatedAuthenticationProvider provider = new PreAuthenticatedAuthenticationProvider();
        provider.setPreAuthenticatedUserDetailsService(new UserDetailsByNameServiceWrapper<>(mongoUserDetailsService));
        return new ProviderManager(Arrays.asList(provider));
    }
}

// 该注解开启单点登录
@EnableOAuth2Sso
@Configuration
public class WebSecurityConfig extends WebSecurityConfigurerAdapter {

    @Autowired
    private EnvironmentUtils environmentUtils;

    @Override
    public void configure(WebSecurity web) throws Exception {
        web.ignoring().antMatchers("/bootstrap/**");
    }

    @Override
    protected void configure(HttpSecurity http) throws Exception {
        if ("local".equals(environmentUtils.getActiveProfile())) {
            http.authorizeRequests().anyRequest().permitAll();
        }else {
            // 登出：先调用本地/logout，调用成功再调用认证中心的logout
            // 注意，这种登出方式会有问题：
            // 当有多个子系统时，必须要挨个退出各子系统才能实现所有子系统的退出
            // 可以理解为，子系统并不是每个请求都去认证中心校验了token
            // 而是会先利用局部会话中的session先本地校验，校验通过即可直接访问受保护资源
            http.logout().logoutSuccessUrl("http://localhost:18081/v1/account/logout/sso")
                    .and()
                	// 所有请求都需先认证才可访问
                    .authorizeRequests()
                    .anyRequest().authenticated()
                    .and()
                    .csrf().disable();
        }
    }
}