Spring Oauth2 Get Current User Object

Question

I am using Spring 5 Oauth2. I can see current valid tokens.

Collection<OAuth2AccessToken> tokens = tokenStore.findTokensByClientId("clientIdPassword");
    if (tokens != null) {
        for (OAuth2AccessToken token : tokens) {
            tokenValues.add(token.getValue());
        }
    }

Above code block shows me valid tokens whose client id is clientIdPassword, but I want to get only current logged user object. I tried Authentication authentication = SecurityContextHolder.getContext().getAuthentication();but it returns anonymous user. Is there a way to get the only current logged user object?

I am also stuck at same issue but no solution found yet. This issue is in case of Oauth2 + Spring security. — Shailesh Vikram Singh, Mar 23 '21 at 07:32

score 1 · Answer 1 · answered Mar 09 '18 at 06:21

1

In your Token Service, you can add the OAuth2Authentication Class as an argument

 @RequestMapping(method = RequestMethod.POST, value = "/oauth/token/revokeById/{tokenId}")
    @ResponseBody
    public void revokeToken(HttpServletRequest request, @PathVariable String tokenId,OAuth2Authentication auth) {

Springboot will automatically map the logged-in user details to this object. Now, you can do the following to access the username

auth.getPrincipal().toString()

answered Mar 09 '18 at 06:21

CGS

2,782
18
25

`OAuth2Authentication` returns null interestingly... But I do see the token from `tokenStore.findTokensByClientId("clientIdPassword");`. – Eniss Mar 09 '18 at 07:11
@Chids Any idea on this issue https://stackoverflow.com/questions/49229551/spring-oauth2-0-getting-user-roles-based-on-client-id – Alex Man Mar 12 '18 at 08:32
@eniss are you doing this logic in your authorization server and are you using jdbc token store? – CGS Mar 12 '18 at 14:05

score 0 · Answer 2 · answered Mar 09 '18 at 02:08

0

Usually, your code is the right way to get current login user object.
If you want to find other ways refer here : http://www.baeldung.com/get-user-in-spring-security

answered Mar 09 '18 at 02:08

Min Hyoung Hong

1,102
9
13

2

Please incorporate the content of your external link into your answer. Link-only answers are useless if the link it points to dies. – Roddy of the Frozen Peas Mar 09 '18 at 02:34

Spring Oauth2 Get Current User Object

2 Answers2