java - spring-security-oauth2-authorization-server:0.1.1 获取令牌错误 invalid_client

Question

我正在使用弹簧授权服务器，但我无法获得令牌。这是我的代码和示例。请帮我知道正确的请求

@Bean
public RegisteredClientRepository registeredClientRepository() {
    RegisteredClient registeredClient = RegisteredClient.withId(UUID.randomUUID().toString())
            .clientId("client")
            .clientSecret("secret")
            .clientAuthenticationMethod(ClientAuthenticationMethod.CLIENT_SECRET_BASIC)
            .clientAuthenticationMethod(ClientAuthenticationMethod.CLIENT_SECRET_JWT)
            .clientAuthenticationMethod(ClientAuthenticationMethod.CLIENT_SECRET_POST)
            .clientAuthenticationMethod(ClientAuthenticationMethod.PRIVATE_KEY_JWT)
            .authorizationGrantType(AuthorizationGrantType.PASSWORD)
            .authorizationGrantType(AuthorizationGrantType.REFRESH_TOKEN)
            .authorizationGrantType(AuthorizationGrantType.CLIENT_CREDENTIALS)
            .authorizationGrantType(AuthorizationGrantType.JWT_BEARER)
            .clientSettings(clientSettings -> clientSettings.requireUserConsent(true))
            .build();
    return new InMemoryRegisteredClientRepository(registeredClient);
}

这是我对基本身份验证客户端/秘密的要求

curl --location --request POST 'http://localhost:9000/oauth2/token'
--header '授权：基本 Y2xpZW50OnNlY3JldA=='
--header '内容类型：application/x-www-form-urlencoded'
--header 'Cookie: JSESSIONID=557C0348994EFC10DB8E7F06C2FDFF21'
--data-urlencode 'grant_type=client_credentials'

响应 401：

{“错误”：“无效客户端”}

标签： javaspring-bootauthorizationspring-security-oauth2spring-oauth2

Answer 1

您可以尝试升级spring-security-oauth2-authorization-server到更新版本0.2.0

我遇到了同样的问题client_secret_post，但是升级版本对我有用。