Spring OAuth2 令牌请求中的 StackOverflowError

Question

I have problems implementing OAuth2 with Spring...

This is my Configuration related to Security:

@Configuration
@EnableWebSecurity
public class SecurityConfiguration extends WebSecurityConfigurerAdapter {

@Override
public final void configure(final HttpSecurity http) throws Exception {
    http.csrf().disable();
    http.authorizeRequests().antMatchers("/oauth/token").anonymous();
    http.authorizeRequests()
        .antMatchers("/**").fullyAuthenticated();
}

@Override
@Bean
public AuthenticationManager authenticationManagerBean() throws Exception {
    return super.authenticationManagerBean();
}

@Configuration
@EnableAuthorizationServer
protected static class OAuth2Config extends AuthorizationServerConfigurerAdapter {

    @Autowired
    @Qualifier("authenticationManagerBean")
    private AuthenticationManager authenticationManager;

    @Autowired
    private IUserService customUserService;

    @Bean
    public UserDetailsService userDetailsService() {
        return customUserService;
    }

    @Autowired
    private IClientOAuth2DetailsService customClientDetailsService;

    @Bean
    public ClientDetailsService clientDetailsService() throws Exception {
        return customClientDetailsService;
    }

    @Override
    public final void configure(final AuthorizationServerEndpointsConfigurer endpoints) throws Exception {
        endpoints.authenticationManager(authenticationManager);
    }

    @Override
    public final void configure(final ClientDetailsServiceConfigurer clients) throws Exception {
        clients.withClientDetails(clientDetailsService());
    }
}
}

Like you can see, I made my own implementation of ClientDetailsService:

private ClientDetailsService internalClientDetailsService;

public ClientOAuth2DetailsServiceImpl() throws Exception {
            internalClientDetailsService = new InMemoryClientDetailsServiceBuilder().withClient("admin")
                .secret("admin")
                .authorizedGrantTypes("password")
                .authorities("ROLE_CLIENT")
            .and()
            .build();
}

@Override
public final ClientDetails loadClientByClientId(final String client) throws ClientRegistrationException {
    return internalClientDetailsService.loadClientByClientId(client);
}

I'm using Postman extension in Chrome to test the oauth/token request:

When I send my request, it seems that the ClientDetailsService works fine but after return the ClientDetails, I'm always getting this stacktrace:

java.lang.StackOverflowError: null
    at java.lang.ReflectiveOperationException.<init>(Unknown Source) ~[na:1.8.0_45]
    at java.lang.reflect.InvocationTargetException.<init>(Unknown Source) ~[na:1.8.0_45]
    at sun.reflect.GeneratedMethodAccessor34.invoke(Unknown Source) ~[na:na]
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source) ~[na:1.8.0_45]
    at java.lang.reflect.Method.invoke(Unknown Source) ~[na:1.8.0_45]
    at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:302) ~[spring-aop-4.2.2.RELEASE.jar:4.2.2.RELEASE]
    at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:201) ~[spring-aop-4.2.2.RELEASE.jar:4.2.2.RELEASE]
    at com.sun.proxy.$Proxy67.authenticate(Unknown Source) ~[na:na]
    at org.springframework.security.authentication.ProviderManager.authenticate(ProviderManager.java:192) ~[spring-security-core-4.0.3.RELEASE.jar:4.0.3.RELEASE]
    at org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter$AuthenticationManagerDelegator.authenticate(WebSecurityConfigurerAdapter.java:436) ~[spring-security-config-3.2.8.RELEASE.jar:3.2.8.RELEASE]
    at sun.reflect.GeneratedMethodAccessor34.invoke(Unknown Source) ~[na:na]
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source) ~[na:1.8.0_45]
    at java.lang.reflect.Method.invoke(Unknown Source) ~[na:1.8.0_45]
    at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:302) ~[spring-aop-4.2.2.RELEASE.jar:4.2.2.RELEASE]
    at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:201) ~[spring-aop-4.2.2.RELEASE.jar:4.2.2.RELEASE]
    at com.sun.proxy.$Proxy67.authenticate(Unknown Source) ~[na:na]
    at org.springframework.security.authentication.ProviderManager.authenticate(ProviderManager.java:192) ~[spring-security-core-4.0.3.RELEASE.jar:4.0.3.RELEASE]

I don't understand why... What I'm missing?

Thanks!

Answer 1

Solved!

I was missing this method where you have to configure the AuthenticationManager:

@Override
protected void configure(AuthenticationManagerBuilder auth) throws Exception {
    ...
}

Answer 2

Resolved by changing this method authenticationManagerBean

@Bean
    @Override
    public AuthenticationManager authenticationManager() throws Exception {
        return super.authenticationManager();
    }

---Fix---

@Bean
    @Override
    public AuthenticationManager authenticationManagerBean() throws Exception {
        return super.authenticationManagerBean();
    }