java - 如何避免 Spring Boot OAuth2 中相同 OAuth 令牌的重复 authenticationId

@Configuration @EnableAuthorizationServer @ConditionalOnProperty(name="EnableJwtToken", matchIfMissing=true, havingValue="false") public class AuthServerOAuth2Config extends AuthorizationServerConfigurerAdapter { @Autowired private AuthenticationManager authenticationManager; @Autowired private CustomUserDetailsService userDetailsService; @Autowired private OauthApp1PropertiesConfigurer oauthApp1PropertiesConfigurer; // Issue comes with this client @Autowired private OauthApp2PropertiesConfigurer oauthApp2PropertiesConfigurer; @Autowired @Qualifier("AppCustomTokenImpl") private TokenEnhancer tokenEnhancer; @Autowired @Qualifier("dataSource") private DataSource dataSource; private static final String ACCESS_TOKEN_INSERT_STATEMENT = "insert into EZTTBLS.oauth_access_token (token_id, token, authentication_id, user_name, client_id, authentication, refresh_token) values (?, ?, ?, ?, ?, ?, ?)"; private static final String ACCESS_TOKEN_SELECT_STATEMENT = "select token_id, token from EZTTBLS.oauth_access_token where token_id = ?"; private static final String ACCESS_TOKEN_AUTHENTICATION_SELECT_STATEMENT = "select token_id, authentication from EZTTBLS.oauth_access_token where token_id = ?"; private static final String ACCESS_TOKEN_FROM_AUTHENTICATION_SELECT_STATEMENT = "select token_id, token from EZTTBLS.oauth_access_token where authentication_id = ?"; private static final String ACCESS_TOKENS_FROM_USERNAME_AND_CLIENT_SELECT_STATEMENT = "select token_id, token from EZTTBLS.oauth_access_token where user_name = ? and client_id = ?"; private static final String ACCESS_TOKENS_FROM_USERNAME_SELECT_STATEMENT = "select token_id, token from EZTTBLS.oauth_access_token where user_name = ?"; private static final String ACCESS_TOKENS_FROM_CLIENTID_SELECT_STATEMENT = "select token_id, token from EZTTBLS.oauth_access_token where client_id = ?"; private static final String ACCESS_TOKEN_DELETE_STATEMENT = "delete from EZTTBLS.oauth_access_token where token_id = ?"; private static final String ACCESS_TOKEN_DELETE_FROM_REFRESH_TOKEN_STATEMENT = "delete from EZTTBLS.oauth_access_token where refresh_token = ?"; private static final String REFRESH_TOKEN_INSERT_STATEMENT = "insert into EZTTBLS.oauth_refresh_token (token_id, token, authentication) values (?, ?, ?)"; private static final String REFRESH_TOKEN_SELECT_STATEMENT = "select token_id, token from EZTTBLS.oauth_refresh_token where token_id = ?"; private static final String REFRESH_TOKEN_AUTHENTICATION_SELECT_STATEMENT = "select token_id, authentication from EZTTBLS.oauth_refresh_token where token_id = ?"; private static final String REFRESH_TOKEN_DELETE_STATEMENT = "delete from EZTTBLS.oauth_refresh_token where token_id = ?"; @Override public void configure(AuthorizationServerSecurityConfigurer oauthServer) throws Exception { oauthServer.checkTokenAccess("isAuthenticated()").checkTokenAccess("permitAll()"); } @Override public void configure(ClientDetailsServiceConfigurer clients) throws Exception { clients.inMemory() .withClient(oauthApp1PropertiesConfigurer.getClientDetails().getClientId()) .secret(oauthApp1PropertiesConfigurer.getClientDetails().getClientSecret()) .authorizedGrantTypes(oauthApp1PropertiesConfigurer.getClientDetails().getAllowedGrantTypes()) .scopes("read") .accessTokenValiditySeconds(oauthApp1PropertiesConfigurer.getClientDetails().getAccessTokenValidity()) .refreshTokenValiditySeconds(oauthApp1PropertiesConfigurer.getClientDetails().getRefreshTokenValidity()); .and() .withClient(oauthApp2PropertiesConfigurer.getClientDetails().getClientId()) .secret(oauthApp2PropertiesConfigurer.getClientDetails().getClientSecret()) .authorizedGrantTypes(oauthApp2PropertiesConfigurer.getClientDetails().getAllowedGrantTypes()) .scopes("read") // default Scope for all clients,could be modified in future for scope based access .accessTokenValiditySeconds(oauthMyApp2PropertiesConfigurer.getClientDetails().getAccessTokenValidity()) .refreshTokenValiditySeconds(oauthMyApp2PropertiesConfigurer.getClientDetails().getRefreshTokenValidity()); } @Override public void configure(AuthorizationServerEndpointsConfigurer endpoints) throws Exception { endpoints.tokenStore(tokenStore()).tokenEnhancer(tokenEnhancer).reuseRefreshTokens(false).authenticationManager(authenticationManager).userDetailsService(userDetailsService); } @Bean public TokenStore tokenStore() { JdbcTokenStores jdbcTokenStore = new JdbcTokenStores(dataSource); jdbcTokenStore.setDeleteAccessTokenFromRefreshTokenSql(ACCESS_TOKEN_DELETE_FROM_REFRESH_TOKEN_STATEMENT); jdbcTokenStore.setDeleteAccessTokenSql(ACCESS_TOKEN_DELETE_STATEMENT); jdbcTokenStore.setDeleteRefreshTokenSql(REFRESH_TOKEN_DELETE_STATEMENT); jdbcTokenStore.setInsertAccessTokenSql(ACCESS_TOKEN_INSERT_STATEMENT);// jdbcTokenStore.setInsertRefreshTokenSql(REFRESH_TOKEN_INSERT_STATEMENT); jdbcTokenStore.setSelectAccessTokenAuthenticationSql(ACCESS_TOKEN_AUTHENTICATION_SELECT_STATEMENT); jdbcTokenStore.setSelectAccessTokenFromAuthenticationSql(ACCESS_TOKEN_FROM_AUTHENTICATION_SELECT_STATEMENT); jdbcTokenStore.setSelectAccessTokensFromClientIdSql(ACCESS_TOKENS_FROM_CLIENTID_SELECT_STATEMENT); jdbcTokenStore.setSelectAccessTokensFromUserNameAndClientIdSql(ACCESS_TOKENS_FROM_USERNAME_AND_CLIENT_SELECT_STATEMENT); jdbcTokenStore.setSelectAccessTokensFromUserNameSql(ACCESS_TOKENS_FROM_USERNAME_SELECT_STATEMENT); jdbcTokenStore.setSelectAccessTokenSql(ACCESS_TOKEN_SELECT_STATEMENT); jdbcTokenStore.setSelectRefreshTokenAuthenticationSql(REFRESH_TOKEN_AUTHENTICATION_SELECT_STATEMENT); jdbcTokenStore.setSelectRefreshTokenSql(REFRESH_TOKEN_SELECT_STATEMENT); return jdbcTokenStore; } } @Configuration @EnableResourceServer @EnableWebSecurity @ConditionalOnProperty(name="EnableJWTSecurity", havingValue="false",matchIfMissing=true) public class DefaultResourceServerConfig extends ResourceServerConfigurerAdapter { @Override public void configure(HttpSecurity http) throws Exception { http .authorizeRequests(). antMatchers("/protectedResource1").authenticated() .anyRequest().permitAll() .and().headers() .contentSecurityPolicy("script-src 'self' https://trustedscripts.example.com; object-src https://trustedplugins.example.com; report-uri /csp-report-endpoint/"); } }