Spring 围炉夜话

<project xmlns="http://maven.apache.org/POM/4.0.0" 
  xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
  xsi:schemaLocation="http://maven.apache.org/POM/4.0.0
                      http://maven.apache.org/maven-v4_0_0.xsd">
  <modelVersion>4.0.0</modelVersion>
  <!– The Basics –>
  <groupId>…</groupId>
  <artifactId>…</artifactId>
  <version>…</version>
  <packaging>…</packaging>
  <dependencies>…</dependencies>
  <parent>…</parent>
  <dependencyManagement>…</dependencyManagement>
  <modules>…</modules>
  <properties>…</properties>
  <!– Build Settings –>
  <build>…</build>
  <reporting>…</reporting>
  <!– More Project Information –>
  <name>…</name>
  <description>…</description>
  <url>…</url>
  <inceptionYear>…</inceptionYear>
  <licenses>…</licenses>
  <organization>…</organization>
  <developers>…</developers>
  <contributors>…</contributors>
  <!– Environment Settings –>
  <issueManagement>…</issueManagement>
  <ciManagement>…</ciManagement>
  <mailingLists>…</mailingLists>
  <scm>…</scm>
  <prerequisites>…</prerequisites>
  <repositories>…</repositories>
  <pluginRepositories>…</pluginRepositories>
  <distributionManagement>…</distributionManagement>
  <profiles>…</profiles>
</project>

docker run -d --name=redis  \
-p 6379:6379 \
-v /home/liuqz/learnSpring/docker/redis/conf/redis.conf:/etc/redis/redis.conf \
-v /home/liuqz/learnSpring/docker/redis/data:/data \
--restart=always \
redis:latest redis-server /etc/redis/redis.conf 

# Redis 查看所有的key
keys *
 
# redis如何查看key的有效期
ttl "keyname"
 
# Redis TTL命令用于获取键到期的剩余时间(秒)。
# 返回值是以毫秒为单位的整数值TTL或负值
# 负值代表该键值不存在或没有有效期，具体如下：
#   -1, 如果key没有到期超时。
#   -2, 如果键不存在。

docker run -d --name rabbitmq --restart always --hostname rabbitmq -p 15672:15672 -p 5672:5672 rabbitmq

 
// OAuth2ClientAuthenticationFilter 
public final class OAuth2ClientAuthenticationFilter extends OncePerRequestFilter {
    // ...
    // authenticationConverter 为 DelegatingAuthenticationConverter 
    // 登录时带Authorization返回的是 ClientSecretBasicAuthenticationConverter
    // 登录成功后带jwt，返回的是 JwtClientAssertionAuthenticationConverter
    Authentication authenticationRequest = this.authenticationConverter.convert(request);
    Authentication authenticationResult = this.authenticationManager.authenticate(authenticationRequest);
    // ...
}
 
public final class DelegatingAuthenticationConverter implements AuthenticationConverter {
    // ...
    public Authentication convert(HttpServletRequest request) {
    Assert.notNull(request, "request cannot be null");
        // converters 有四个：
        // JwtClientAssertionAuthenticationConverter，处理JWT
        // ClientSecretBasicAuthenticationConverter，处理头部Authorization
        // ClientSecretPostAuthenticationConverter，处理参数client_id和client_secret
        // PublicClientAuthenticationConverter，PKCE，grant_type，code，code_verifier
    for (AuthenticationConverter converter : this.converters) {
      Authentication authentication = converter.convert(request);
      if (authentication != null) {
        return authentication;
      }
    }
    return null;
  }
}

public class ProviderManager implements AuthenticationManager, MessageSourceAware, InitializingBean {
    // ...
    @Override
  public Authentication authenticate(Authentication authentication) throws AuthenticationException {
        // getProviders() 的值为：
        // AnonymousAuthenticationProvider
        // JwtClientAssertionAuthenticationProvider@19312
        // ClientSecretAuthenticationProvider@19402
        // PublicClientAuthenticationProvider@19406
        // OAuth2AuthorizationCodeRequestAuthenticationProvider@19407
        // ...
        for (AuthenticationProvider provider : getProviders()) {
            if (!provider.supports(toTest)) {
          continue;
        }
            result = provider.authenticate(authentication);
        if (result != null) {
          copyDetails(authentication, result);
          break;
        }
        }
    }
    // ...
}

public final class OAuth2TokenEndpointFilter extends OncePerRequestFilter {
    // ...
    @Override
  protected void doFilterInternal(HttpServletRequest request, HttpServletResponse response, FilterChain filterChain)
      throws ServletException, IOException {
        Authentication authorizationGrantAuthentication = this.authenticationConverter.convert(request);
        OAuth2AccessTokenAuthenticationToken accessTokenAuthentication =
          (OAuth2AccessTokenAuthenticationToken) this.authenticationManager.authenticate(authorizationGrantAuthentication);
      this.authenticationSuccessHandler.onAuthenticationSuccess(request, response, accessTokenAuthentication);
    }
    // ...
}