krnbr

@Bean
fun springSecurityFilterChain(http: ServerHttpSecurity): SecurityWebFilterChain? {

    val httpClient = HttpClient.create()
            .tcpConfiguration{client -> client.option(ChannelOption.CONNECT_TIMEOUT_MILLIS, 10000)}
            .secure { sslContextSpec: SslProvider.SslContextSpec -> sslContextSpec.sslContext(sslContextBuilder(keyStoreContent, keyStorePassword, trustStoreContent, trustStorePassword)) }
    val httpConnector: ClientHttpConnector = ReactorClientHttpConnector(httpClient)

    val builder = NimbusReactiveJwtDecoder
            .withJwkSetUri("https://<host>/.well-known/jwks.json")

krnbr

// pass the base 64 encoded String of the Keystore and keystore password
KeyManagerFactory keyManagerFactory = SSLContextHelper.getKeyStore(encodedKeystoreString, keystorePassword);
// pass the base 64 encoded String of the Truststore and truststore password
TrustManagerFactory trustManagerFactory = SSLContextHelper.getTrustStore(encodedTruststoreString, truststorePassword);
// Construct the SslContext using keyManagerFactory & trustManagerFactory
SslContext sslContext = SSLContextHelper.sslContext(keyManagerFactory, trustManagerFactory);

HttpClient resourceServerHttpClient = HttpClient.create()
      .tcpConfiguration(client -> client.option(ChannelOption.CONNECT_TIMEOUT_MILLIS, 10000))
      .secure(sslContextSpec -> {

krnbr

server.port=8533

spring.security.oauth2.client.registration.local.authorization-grant-type=client_credentials
spring.security.oauth2.client.registration.local.client-id=client_id
spring.security.oauth2.client.registration.local.client-secret=client_secret

oauth2.client.provider.local.token-uri.base-path=https://localhost:8353
spring.security.oauth2.client.provider.local.token-uri=${oauth2.client.provider.local.token-uri.base-path}/oauth/token

oauth2.client.registration.local.ssl-enabled=true

krnbr

\--oauth2-spring-boot-client - Root
|   .gitignore - Git management for ignoring not required files
|   pom.xml - Maven pom.xml
+---src
|   +---main
|   |   +---java
|   |   |   \---in
|   |   |       \---neuw
|   |   |           \---oauth2
|   |   |               |   Oauth2SpringBootClientApplication.java - The SpringBootApplication main class.

krnbr

spring.security.oauth2.client.registration.<identifier>.authorization-grant-type=client_credentials
spring.security.oauth2.client.registration.<identifier>.client-id=client_id
spring.security.oauth2.client.registration.<identifier>.client-secret=client_secret

spring.security.oauth2.client.provider.<identifier>.token-uri=http://localhost:8353/oauth/token

krnbr

@Configuration
public class TestClientConfig {

    @Value("${test.client.base.url}")
    private String testClientBaseUrl;

    private Logger testWebClientLogger = LoggerFactory.getLogger("TEST_WEB_CLIENT");

    /**
     * The authorizedClientManager for required by the webClient

krnbr

\--oauth2-spring-boot-client - Root
|   .gitignore - Git management for ignoring not required files
|   pom.xml - Maven pom.xml      
+---src
|   +---main
|   |   +---java
|   |   |   \---in
|   |   |       \---neuw
|   |   |           \---oauth2
|   |   |               |   Oauth2SpringBootClientApplication.java - The SpringBootApplication main class.

krnbr

public class JKStoBase64String {
    private static final int BUFFER_SIZE = 65535;

    public static byte[] convertFileToByteArray(String certificateFilePath) throws Exception {
        if (certificateFilePath == null || certificateFilePath.isEmpty()) {
            throw new Exception("file path should not be null or empty");
        }
        File file = new File(certificateFilePath);
        if (!file.exists()) {
            throw new Exception("file not exist : " + file.getAbsolutePath());

krnbr

<dependency>
    <groupId>org.springframework.boot</groupId>
    <artifactId>spring-boot-starter-oauth2-resource-server</artifactId>
</dependency>
<dependency>
    <groupId>org.springframework.security</groupId>
    <artifactId>spring-security-oauth2-jose</artifactId>
</dependency>

krnbr

{
  "aud": [
    "mock_aud"
  ],
  "scope": [
    "system"
  ],
  "iss": "http://localhost:8080",
  "scopes": "system",
  "exp": 1586855599,