Spring Security：如何在请求标头中传递oauth2访问令牌

Question

On successful login to my spring security application configured with Oauth2, I received a response with Oauth2 token.

For the subsequent request I passed Oauth2 access_token in URI Query Parameter like this

http://localhost:8090/myapplication/users/user?access_token=4c520795-eb07-4c2d-a91b-474c85fb481e

It is working fine.

But instead of passing token in URI to make it more secure I wanted to send token in request headers.How to do this?

Answer 1

Use the usual HTTP Authorization header:

Authorization: Bearer <your-token-here>

For example

Authorization: Bearer 4c520795-eb07-4c2d-a91b-474c85fb481e