Oauth2 访问oauth/authorize/**出现 403_oauth2 client_credentials 403

问题: Oauth2 访问oauth/authorize/**出现 403

访问的url

http://localhost:8080/oauth/authorize?response_type=code&client_id=client&redirect_uri=http://www.baidu.com&scope=all
1

解决方案

修改继承WebSecurityConfigurerAdapter类中的protected void configure(HttpSecurity http)方法

旧的

@Configuration
@EnableWebSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter {

    @Bean
    public PasswordEncoder passwordEncoder () {
        return new BCryptPasswordEncoder();
    }

    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http.authorizeRequests(request ->
                request.antMatchers("/oauth/**", "/login/**", "/logout/**")
                        .permitAll()
                        .anyRequest().authenticated()
        ).csrf(AbstractHttpConfigurer::disable);

    }
}
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19

新的

@Configuration
@EnableWebSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter {

    @Bean
    public PasswordEncoder passwordEncoder () {
        return new BCryptPasswordEncoder();
    }

    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http.formLogin().and().authorizeRequests(request ->
                request.antMatchers("/oauth/**", "/login/**", "/logout/**")
                        .permitAll()
                        .anyRequest().authenticated()
        ).csrf(AbstractHttpConfigurer::disable);

    }
}
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19