How to access resource in MySql. show error about spring-security-oauth

[NABEEL-AHMED-JAMIL]

@Configuration
@EnableWebSecurity
@EnableGlobalMethodSecurity(prePostEnabled = true, jsr250Enabled = true)
public class SecurityConfiguration extends WebSecurityConfigurerAdapter {

    private final Logger log = LoggerFactory.getLogger(SecurityConfiguration.class);

//    @Value("${security.signing-key}")
//    private String signingKey;
//    @Value("${security.encoding-strength}")
//    private Integer encodingStrength;

    @Autowired
    private UserDetailsService userDetailsService;

    @Bean
    public PasswordEncoder passwordEncoder() {
        return new StandardPasswordEncoder();
    }

    @Override
    protected void configure(AuthenticationManagerBuilder auth) throws Exception {
        auth.userDetailsService(userDetailsService).passwordEncoder(passwordEncoder());
    }

    // controller which access open like image and other think
    @Override
    public void configure(WebSecurity web) throws Exception {
        web.
                ignoring().
                antMatchers("/api"+AUTH+"/**");
    }

    @Override
    @Bean
    public AuthenticationManager authenticationManagerBean() throws Exception {
        return super.authenticationManagerBean();
    }

    @Configuration
    @EnableResourceServer
    @EnableGlobalMethodSecurity(prePostEnabled = true, jsr250Enabled = true)
    public class OAuth2ResourceServerConfig extends GlobalMethodSecurityConfiguration {

        @Override
        protected MethodSecurityExpressionHandler createExpressionHandler() {
            return new OAuth2MethodSecurityExpressionHandler();
        }
    }

}


<h3>Resource Server Configuration</h3>

@Configuration
@EnableResourceServer
public class ResourceServerConfiguration extends ResourceServerConfigurerAdapter {

    private final Logger log = LoggerFactory.getLogger(ResourceServerConfiguration.class);

    private static final String LOGOUT = "/aouth/logout";
    private static final String AUTHORIZE = "/oauth/authorize";

    @Value("${security.jwt.resource-ids}")
    private String resourceIds;
    @Value("${security.security-realm}")
    private String securityRealm;

    @Autowired
    private ResourceServerTokenServices tokenServices;
    @Autowired
    private CustomAuthenticationEntryPoint customAuthenticationEntryPoint;
    @Autowired
    private CustomLogoutSuccessHandler customLogoutSuccessHandler;


    @Override
    public void configure(ResourceServerSecurityConfigurer resources) throws Exception {
        resources.resourceId(resourceIds).tokenServices(tokenServices);
    }

    @Override
    public void configure(HttpSecurity http) throws Exception {
        http.httpBasic().realmName(securityRealm).and().
                csrf().requireCsrfProtectionMatcher(new AntPathRequestMatcher(AUTHORIZE)).disable().
                exceptionHandling().authenticationEntryPoint(customAuthenticationEntryPoint).
                and().
                logout().logoutUrl(LOGOUT).logoutSuccessHandler(customLogoutSuccessHandler).
                and().
                // access after the login user
                authorizeRequests().antMatchers("/secure/**").authenticated().
                and().
                headers().frameOptions().disable();
    }
}

<h3>Authorization Server Configuration Class</h3>

@Configuration
@EnableAuthorizationServer
public class AuthorizationServerConfiguration extends AuthorizationServerConfigurerAdapter {

    private final Logger log = LoggerFactory.getLogger(AuthorizationServerConfiguration.class);

    @Value("${security.jwt.client-id}")
    private String clientId;
    @Value("${security.jwt.client-secret}")
    private String clientSecret;
    @Value("${security.jwt.grant-type-password}")
    private String grantTypePassword;
    @Value("${security.jwt.grant-type-refresh_token}")
    private String grantTypeRefreshToken;
    @Value("${security.jwt.grant-type-client-credentials}")
    private String grantTypeClientCredentials;
    @Value("${security.jwt.scope-read}")
    private String scopeRead;
    @Value("${security.jwt.scope-write}")
    private String scopeWrite = "write";
    @Value("${security.jwt.resource-ids}")
    private String resourceIds;


    @Autowired
    @Qualifier("authenticationManagerBean")
    private AuthenticationManager authenticationManager;

    @Autowired
    private DataSource dataSource;

    @Bean
    public TokenStore tokenStore() { return new JdbcTokenStore(dataSource); }

    @Bean
    @Primary
    public DefaultTokenServices tokenServices() {
        DefaultTokenServices defaultTokenServices = new DefaultTokenServices();
        defaultTokenServices.setTokenStore(tokenStore());
        defaultTokenServices.setSupportRefreshToken(true);
        return defaultTokenServices;
    }


    @Override
    public void configure(AuthorizationServerSecurityConfigurer oauthServer) throws Exception {
        oauthServer.tokenKeyAccess("permitAll()").checkTokenAccess("isAuthenticated()");
    }

    @Override
    public void configure(ClientDetailsServiceConfigurer clients) throws Exception {

        clients.jdbc(dataSource).
                withClient(clientId).resourceIds(resourceIds).
                scopes(scopeRead,scopeWrite).
                authorities(Authorities.ROLE_ADMIN.name(), Authorities.ROLE_USER.name(),
                        Authorities.ROLE_ANONYMOUS.name()).
                authorizedGrantTypes(grantTypePassword, grantTypeClientCredentials,
                        grantTypeRefreshToken).
                secret(clientSecret).
                accessTokenValiditySeconds(180).
                refreshTokenValiditySeconds(180*2);
    }

    @Override
    public void configure(AuthorizationServerEndpointsConfigurer endpoints)
            throws Exception {
        endpoints.tokenStore(tokenStore()).
                authenticationManager(authenticationManager).
                tokenEnhancer(new CustomTokenEnhancer());
    }

    public class CustomTokenEnhancer implements TokenEnhancer {

        @Override
        public OAuth2AccessToken enhance(OAuth2AccessToken oAuth2AccessToken,
                                         OAuth2Authentication oAuth2Authentication) {
            try {
                User loginUser = (User) oAuth2Authentication.getPrincipal();
                final Map<String, Object> additionalInfo = new HashMap<>();
                additionalInfo.put("authorities", loginUser.getAuthorities());
                additionalInfo.put("username", loginUser.getUsername());
                additionalInfo.put("isEnabled", loginUser.isEnabled());
                ((DefaultOAuth2AccessToken) oAuth2AccessToken).setAdditionalInformation(additionalInfo);
                return oAuth2AccessToken;

            }catch (Exception e) {
                e.printStackTrace();
                return null;
            }
        }
    }
}

[lor6]

Hey @NABEEL-AHMED-JAMIL I don't really understand what the issue is. Can you be more specific?

[NABEEL-AHMED-JAMIL]

Sorry #lor6 for late replay to your message. Thanks for replay me and Now issue solve