Spring Security用什么来生成OAuth2令牌？

Question

How Spring Security generates the security token or what algorithms it follows to generate the OAuth2 token?

We can use JWT or open-id, etc. as an authorization token but by default what it uses?

Answer 1

If your are using Spring Security OAuth2 as an authorization server then the default for authorization code is a random value, see RandomValueAuthorizationCodeServices :

Base implementation for authorization code services that generates a random-value authorization code.

and the default for access token and refresh token is a random UUID, see DefaultTokenServices :

Base implementation for token services using random UUID values for the access token and refresh token values.