JAVA Oauth 认证服务器的搭建

1、软件下载

Oauth服务端： http://code.google.com/p/oauth/  通过SVN，下载源码。

                          或者下载站长整合好的示例源码：http://115.com/file/aqvpzqhz

客户端下载：http://code.google.com/p/oauth-signpost/  oauth-signpost

                         或者下载站长整合好的示例源码：http://115.com/file/bhy1d2ce

2、服务端源码下载后，把相关代码整合在一起（或直接下载站长整合好的代码），修改net.oauth.provider.core.SampleOAuthProvider  类，把从 provider.properties 读取的信息改为从数据库中读取，如APP_KEY、APP_SCERET、描述、回调地址。

3、net.oauth.example.provider.servlets下面的四个类，这里对应着oauth3个请求url，跟一个用于测试的链接，可以根据需求修改，如将调用Oauth的用户信息记录下来。

4、修改web.xml 增加三个请求url

01 <servlet>
02         <servlet-name>request_token</servlet-name>
03         <servlet-class>net.oauth.provider.servlets.RequestTokenServlet</servlet-class>
04     </servlet>
05     <servlet-mapping>
06         <servlet-name>request_token</servlet-name>
07         <url-pattern>/oauth/request_token</url-pattern>
08     </servlet-mapping>
09
10     <servlet>
11         <servlet-name>access_token</servlet-name>
12         <servlet-class>net.oauth.provider.servlets.AccessTokenServlet</servlet-class>
13     </servlet>
14     <servlet-mapping>
15         <servlet-name>access_token</servlet-name>
16         <url-pattern>/oauth/access_token</url-pattern>
17     </servlet-mapping>
18
19     <servlet>
20         <servlet-name>authorize</servlet-name>
21         <servlet-class>net.oauth.provider.servlets.AuthorizationServlet</servlet-class>
22     </servlet>
23     <servlet-mapping>
24         <servlet-name>authorize</servlet-name>
25         <url-pattern>/oauth/authorize</url-pattern>
26     </servlet-mapping>

5、做个拦截器，只要通过某url访问的都需要进行Oauth认证：

web.xml

1 <filter>
2        <filter-name>OauthFilter</filter-name>
3        <filter-class>web.school.phone.OauthFilter</filter-class>
4     </filter>
5     <filter-mapping>
6        <filter-name>OauthFilter</filter-name>
7        <url-pattern>/phone/*</url-pattern>
8     </filter-mapping>

 web.school.phone.OauthFilter

01     package web.school.phone;
02          import java.io.IOException;
03
04     import javax.servlet.Filter;
05     import javax.servlet.FilterChain;
06     import javax.servlet.FilterConfig;
07     import javax.servlet.ServletException;
08     import javax.servlet.ServletRequest;
09     import javax.servlet.ServletResponse;
10     import javax.servlet.http.HttpServletRequest;
11     import javax.servlet.http.HttpServletResponse;
12
13     import net.oauth.OAuthAccessor;
14     import net.oauth.OAuthMessage;
15     import net.oauth.provider.core.SampleOAuthProvider;
16     import net.oauth.server.OAuthServlet;
17
18     public class OauthFilter implements Filter {
19
20       public void destroy() {
21       }
22
23       public void init(FilterConfig fConfig) throws ServletException {
24       }
25
26       public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain)
27       throws IOException, ServletException {
28         HttpServletRequest req=(HttpServletRequest)request;
29         HttpServletResponse res=(HttpServletResponse)response;
30
31         try{
32             OAuthMessage requestMessage = OAuthServlet.getMessage(req, null);
33             OAuthAccessor accessor = SampleOAuthProvider.getAccessor(requestMessage);
34             SampleOAuthProvider.VALIDATOR.validateMessage(requestMessage, accessor);
35
36             System.out.println("[OauthFilter:passed]:"+req.getRequestURI());
37             chain.doFilter(request, response);//验证通过则转向
38
39         } catch (Exception e){
40             //验证不通过
41             SampleOAuthProvider.handleException(e, req, res, false);
42         }
43
44       }
45
46 }

6、执行客户端代码，提示输入验证码时，把控制台打印的URL放到浏览器里打开，输入授权码：

（服务端AuthorizationServlet 里面修改验证不通过要跳转的页面，页面上会打印一些参数）