angularjs – 如何将常规用户名/密码登录与第三方社交登录集成为

以下是我使用Facebook作为授权服务器所做的工作.

a)从UserServiceImpl中删除clientId和authServer.否则,您将被迫配置不需要的授权服务器.

b)完全删除AuthorizationServerConfiguration.

c)将@EnableWebSecurity和@ EnableOAuth2Sso添加到您的MainConfiguration.

d)将MainConfiguration :: configure更改为

http
    .logout().logoutSuccessUrl("/").permitAll().and()
    .authorizeRequests().antMatchers("/","/login","/home.html").permitAll()
    .anyRequest().authenticated()
    .and().csrf().csrfTokenRepository(CookieCsrfTokenRepository.withHttpOnlyFalse());

e)从MainConfiguration中删除除嵌套类AuthenticationSecurity之外的所有其他内容.

f)将ResourceServerConfiguration :: configure(HttpSecurity)更改为

http.antMatcher("/api/**").authorizeRequests().anyRequest().authenticated();

f)从ResourceServerConfiguration中删除属性tokenStore和方法ResourceServerConfiguration :: configure(ResourceServerSecurityConfigurer).

g)从application.yml中删除配置块安全性和Facebook.而是添加这个

security:
  oauth2:
    client:
      client-id: <CLIENT_ID>
      token-name: oauth_token
      authentication-scheme: query
      client-authentication-scheme: form
      access-token-uri: https://graph.facebook.com/oauth/access_token
      user-authorization-uri: https://www.facebook.com/dialog/oauth
    resource:
      user-info-uri: https://graph.facebook.com/me
      client-id: <CLIENT_ID>
      client-secret: <CLIENT_SECRET>
      token-type: code

h)在index.html中更改< a href =“#/ login”> login< / a>到< a href =“/ login”>登录< / a>.
i)用此one替换hello.js的内容.

But I’d like to have the traditional username/password form login experience (log user in directly instead of showing the Authorization page).

我永远不会使用需要我的凭据的网站,而不会将我重定向到原点！我不认识你,你被怀疑是一个网络钓鱼网站.
你应该重新考虑你的决定.

顺便说一下,我用这些更改创建了一个拉取请求.