feign之间传递oauth2 token的问题及解决方案

/**

  * 发送FeignClient设置Header信息.

  * http://HdhCmsTestitmuch测试数据/spring-cloud-sum/hystrix-threadlocal/

  * Hystrix传播ThreadLocal对象

  */

@Component

public class TokenFeignClientInterceptor implements RequestInterceptor {

   /**

    * token放在请求头.

    *

    * @param requestTemplate 请求参数

    */

   @Override

   public void apply(RequestTemplate requestTemplate) {

    RequestAttributes requestAttributes = RequestContextHolder.currentRequestAttributes();

    if (requestAttributes != null ) {

      HttpServletRequest request = ((ServletRequestAttributes) requestAttributes).getRequest();

      String token = request.getHeader(TokenContext.KEY_OAUTH2_TOKEN);

      requestTemplate.header(TokenContext.KEY_OAUTH2_TOKEN,

          new String[] {token});

    }

   }

}

hystrix测试数据mand. default .execution.isolation.strategy: SEMAPHORE 

security:

   oauth2:

    resource:

      id: user

      user-info-uri: http://${auth.host:localhost}:${auth.port:8002}/user # 这里是授权服务的地址，即auth-service

      prefer-token-info: false

auth:

   host: localhost  #这个不可以用eureka里的服务名，只能使用docker-compose里的服务名

   port: 8002

  Authentication authentication = SecurityContextHolder.getContext().getAuthentication();

    String user = objectMapper.writeValueAsString(authentication.getPrincipal());

import feign.RequestInterceptor;

import feign.RequestTemplate;

import org.springframework.context.annotation.Configuration;

import org.springframework.security.core.Authentication;

import org.springframework.security.core.context.SecurityContext;

import org.springframework.security.core.context.SecurityContextHolder;

import org.springframework.security.oauth2.provider.authentication.OAuth2AuthenticationDetails;

@Configuration

public class FeignOauth2RequestInterceptor implements RequestInterceptor {

     private final String AUTHORIZATION_HEADER = "Authorization" ;

     private final String BEARER_TOKEN_TYPE = "Bearer" ;

     @Override

     public void apply(RequestTemplate requestTemplate) {

         SecurityContext securityContext = SecurityContextHolder.getContext();

         Authentication authentication = securityContext.getAuthentication();

         if (authentication != null && authentication.getDetails() instanceof OAuth2AuthenticationDetails) {

             OAuth2AuthenticationDetails details = (OAuth2AuthenticationDetails) authentication.getDetails();

             requestTemplate.header(AUTHORIZATION_HEADER, String.format( "%s %s" , BEARER_TOKEN_TYPE, details.getTokenValue()));

         }

     }

}