Awọn igbasilẹ JWKS nipasẹ aṣoju fun ẹrọ iyipada JWT alaifọwọyi ti Spring

var transport = reactor.netty.http.client.HttpClient.create()
    .proxy(spec -> spec
        .type(reactor.netty.transport.ProxyProvider.Proxy.HTTP)
        .host("proxy.example")
        .port(8080));
var webClient = org.springframework.web.reactive.function.client.WebClient
    .builder()
    .clientConnector(new org.springframework.http.client.reactive
        .ReactorClientHttpConnector(transport))
    .build();

var decoder = org.springframework.security.oauth2.jwt.NimbusReactiveJwtDecoder
    .withJwkSetUri(jwkSetUri)
    .webClient(webClient)
    .build();
decoder.setJwtValidator(org.springframework.security.oauth2.jwt.JwtValidators
    .createDefaultWithIssuer(issuer));

Lo awọn iye jwkSetUri/issuer ti o gbẹkẹle ki o fi ẹrọ iyipada yii sori nipasẹ bean ReactiveJwtDecoder gidi tabi iṣeto olupin awọn orisun ti o han gbangba. Ṣiṣẹda rẹ lẹgbẹẹ ẹrọ iyipada ti nṣiṣẹ ti ko yipada ko yi gbigba awọn kọkọ pada. Ti URL JWKS ti o gbẹkẹle ba jẹ ti gbogbo eniyan ti a si gba awọn alarinrin gbogbo eniyan laaye, akojọ aṣoju HTTP n pese awọn oludije fun olupin ati ibudo ti gbigbe ti ko nilo akọọlẹ.

Oluyẹwo ti o han naa n tọju awọn ayẹwo akoko aiyipada ati ijẹrisi issuer. Tọju awọn ibeere audience ati gbogbo awọn oluyẹwo afikun ti ohun elo nigbati o ba rọpo ẹrọ iyipada.

URI kọkọ ti a mọ n fori wiwa kọja lati wa rẹ. Ti paati miiran ba tun n ṣe wiwa tabi gbigba token, ṣeto ọna alabara yẹn lọtọ.

Eyi bo ijẹrisi JWT alaifọwọyi lori olupin awọn orisun. Olupin awọn orisun Servlet, iwọle OAuth2 ati awọn alabara API iṣowo ni awọn kio miiran; tọju URL kọkọ ti o kuna ati ipele pẹlu iwadii naa.