Spring Reactive OAuth2: izicelo ze-token client_credentials nge-proxy

Isisetshenziswa WebClient esidlula ku-proxy singase sihluleke ngaphambi kocingo lwe-API uma ukutholwa kwetokeni kusebenzisa enye i-connector. Ngokugeleza kwe-client_credentials okusebenzayo kwe-Spring Security 6.5, xhumanisa izingxenye zontathu:

HttpClient route = HttpClient.create()
    .proxy(p -> p.type(ProxyProvider.Proxy.HTTP)
        .host("proxy.example").port(8080));
WebClient tokenHttp = WebClient.builder()
    .clientConnector(new ReactorClientHttpConnector(route))
    .build();

var tokens = new WebClientReactiveClientCredentialsTokenResponseClient();
tokens.setWebClient(tokenHttp);

var provider = new ClientCredentialsReactiveOAuth2AuthorizedClientProvider();
provider.setAccessTokenResponseClient(tokens);

var manager = new AuthorizedClientServiceReactiveOAuth2AuthorizedClientManager(
    registrations, authorizedClients);
manager.setAuthorizedClientProvider(provider);

tokens.setWebClient inika i-HTTP client yetokeni; provider.setAccessTokenResponseClient iyinika umhlinzeki we-grant; manager.setAuthorizedClientProvider ifaka lowo mhlinzeki. Sebenzisa lo mphathi kusihlungi sangempela se-OAuth noma kugeleza komsebenzi we-authorized-client.

HttpClient ne-ProxyProvider yizinhlobo ze-Reactor Netty. I-WebClient ne-connector yayo yizinhlobo ze-Spring WebFlux. Nikeza i-ReactiveClientRegistrationRepository ekhona njenge-registrations ne-ReactiveOAuth2AuthorizedClientService njenge-authorizedClients.

Lo mhlinzeki uphatha i-client_credentials; gcina uchungechunge lomhlinzeki olufanele uma kudingeka amanye ama-grant. Isibonelo asinayo i-akhawunti ye-proxy; lokho bekungaba okokuthutha hhayi i-OAuth client ID/secret. Nge-token endpoint yomphakathi evunyelwe ngomlamuli womphakathi, khetha i-host ne-port kusuka ohleni lwe-proxy ye-HTTP.

Lungiselela ne-connector yesisetshenziswa esivikelwe uma lezo zicelo ze-API zidinga umzila. Impumelelo yetokeni neye-API yimiphumela ehlukene.