0

I am working on Spring REST with OAuth2 integration nad below are the details :

Spring : 4.3.0
Spring Security : 4.1.0
Sping OAuth : 2.3.0
JDK 1.6
Deployed in both Tomcat 7.0 and Websphere 7.

I am able to deploy the project and able to access the Resource as well. But OAuth not working. Without passing token etccc I am ble to get the response from the REST service.

Controller : https://gist.github.com/nareshnaredla2424/803b4e3aa0428ecbd36aacd86d47d7c6

AuthorizationServerConfigurerAdapter : https://gist.github.com/nareshnaredla2424/3e9baf2c895045db8b71b57b129392fd

ResourceServerConfigurerAdapter : https://gist.github.com/nareshnaredla2424/2de1fa631fc172b5d2cb2ccab80cb209

WebSecurityConfigurerAdapter: https://gist.github.com/nareshnaredla2424/66473b3e7644bf3fbdcf783a8e73a191

GlobalMethodSecurityConfiguration: https://gist.github.com/nareshnaredla2424/799d9153a1413aecbd49243fe2275dc5

AbstractAnnotationConfigDispatcherServletInitializer : https://gist.github.com/nareshnaredla2424/b64a424ee0f98050e3d5c6c58fa53e27

WebMvcConfigurerAdapter: https://gist.github.com/nareshnaredla2424/b66c35efbafdc8a64843d78455dc8d92

I am Facing this issue from few days.

Could anybody please help me to resolve this issue.

Thank you.

Naresh.Naredla
  • 61
  • 1
  • 7

1 Answers1

0

Try this few changes :

In OAuth2ResourceServerConfig class,remove the method :

public void configure(HttpSecurity http) throws Exception and the class will look like : 

@Configuration
@EnableResourceServer
public class OAuth2ResourceServerConfig extends ResourceServerConfigurerAdapter {

    private static final String RESOURCE_ID = "SPRING_REST_API";

    @Override
    public void configure(ResourceServerSecurityConfigurer resources) {
        resources.resourceId(RESOURCE_ID).stateless(false);
    }
}

In OAuth2SecurityConfig class, update the method :

protected void configure(HttpSecurity http) by adding antMatchers("/**").authenticated() like this : 

@Override
    protected void configure(HttpSecurity http) throws Exception {
        http
        .csrf().disable()
        .anonymous().disable()
        .authorizeRequests()
        .antMatchers("/oauth/token").permitAll()
        .antMatchers("/**").authenticated();
    }
Paulin Amougou
  • 139
  • 1
  • 10