Spring NimbusJwtDecoder: wucewar saukar da saitin JWK ta wakili

Buƙatar bearer mai shigowa na iya isa uwar garken albarkatu yayin da tabbacin JWT ya kasa a saukar da JWK mai fita. Saita abokin ciniki na HTTP da wannan mai yanke bayanan ke amfani da shi:

var factory = new org.springframework.http.client.SimpleClientHttpRequestFactory();
factory.setProxy(new java.net.Proxy(
    java.net.Proxy.Type.HTTP,
    new java.net.InetSocketAddress("proxy.example", 8080)));
var rest = new org.springframework.web.client.RestTemplate(factory);

var decoder = org.springframework.security.oauth2.jwt.NimbusJwtDecoder
    .withJwkSetUri(jwkSetUri)
    .restOperations(rest)
    .build();
decoder.setJwtValidator(
    org.springframework.security.oauth2.jwt.JwtValidators
        .createDefaultWithIssuer(issuer));

Yi amfani da ainihin jwkSetUri da issuer na aikace-aikacen kuma ka saka wannan mai yanke bayanan a ainihin tsarin uwar garken albarkatu. Misalin yana amfani da wakilin HTTP mara tabbaci tare da mai yanke bayanan Nimbus irin na servlet. Don adireshin JWK na jama'a a kan hanyar wakilin jama'a da aka yarda, jerin wakilan HTTP yana bayar da ƙimar mai masauki da tashar jiragen ruwa.

Mai tabbatar da issuer a misalin ba ya maye gurbin binciken audience da ake buƙata ko wasu binciken aikace-aikacen. Riƙe su yayin maye gurbin mai yanke bayanan da aka saita ta atomatik; canza hanyar saukar da maɓalli ba ya bayyana waɗanne token aikace-aikacen ya kamata ya karɓa.

Mai yanke bayanan mai amsawa yana amfani da wata hanyar sadarwa. Sauran abokan ciniki na gano issuer ko samun token suma suna riƙe nasu tsarin jigilar.

Maɓallan da aka adana na iya sa tabbacin ya yi nasara ba tare da sabon saukarwa ba. Riƙe adireshin maɓallin da ya kasa da matakin sabuntawa ko farawa yayin kimanta hanyar.