Configuring Spring Security with OAuth and JWT

OAuth2Configuration.groovy

    @Configuration
    @EnableAuthorizationServer
    static class OAuth2Configuration extends AuthorizationServerConfigurerAdapter {

        @Autowired
        @Qualifier('authenticationManagerBean')
        AuthenticationManager authenticationManager


        @Override
        void configure(ClientDetailsServiceConfigurer clients) throws Exception {
            clients.inMemory()
                    .withClient('web-app')
                    .scopes('read')
                    .autoApprove(true)
                    .accessTokenValiditySeconds(600)
                    .refreshTokenValiditySeconds(600)
                    .authorizedGrantTypes('implicit', 'refresh_token', 'password', 'authorization_code')
        }

        @Override
        void configure(AuthorizationServerEndpointsConfigurer endpoints) throws Exception {
            endpoints.tokenStore(tokenStore()).tokenEnhancer(jwtTokenEnhancer()).authenticationManager(authenticationManager)
        }


        @Bean
        TokenStore tokenStore() {
            new JwtTokenStore(jwtTokenEnhancer())
        }

        @Bean
        protected JwtAccessTokenConverter jwtTokenEnhancer() {
            KeyStoreKeyFactory keyStoreKeyFactory = new KeyStoreKeyFactory(
                    new ClassPathResource('jwt.jks'), 'mySecretKey'.toCharArray())
            JwtAccessTokenConverter converter = new JwtAccessTokenConverter()
            converter.setKeyPair(keyStoreKeyFactory.getKeyPair('jwt'))
            converter
        }
    }