OAuth 2实战宝典

随着互联网的普及，合作共赢成了一个越来越受重视的话题。一些成熟的互联网企业，需 要与众多的第三方企业进行合作，以便为自己的用户提供丰富的个性化应用。在这个过程中， 企业需要将自身的一些能力(API)开放给第三方合作企业，具体的实现形式一般是搭建一个 专门的开放平台系统。无论企业通过何种方式来开放自身的能力，授权都是一个绕不开的话题。本书将通过 8 章 来详细对授权的相关内容进行阐述，主要内容包括 OAuth 2 概述、开放平台整体架构、实战中 的授权模式、OpenID 从理论到实战、授权码授权模式回调地址实战、签名、授权信息、基于 Spring Security 的 OAuth 2 实战。

糜鹏程，京东零售担任高级工程师，主要负责开发平台相关的研发工作，对开放平台中各系统的具体实现有深入研究，目前担任开发和维护的JOS网关系统，日活调用量50亿左右。

目录 
第1章 OAuth2概述......................................................................1 
1.1 
1.2 
OAuth 2 的定义 ·········································································.2 1.1.1 官方定义.................................................................................................................2 1.1.2 开放平台中的定义 .................................................................................................2 OAuth 2 的四种授权模式 ·····························································.3 
1.2.1 隐式授权模式.........................................................................................................3 
1.2.2 授权码授权模式 .....................................................................................................5 
1.2.3 授信客户端密码模式 ...........................................................................................10 
1.2.4 授信客户端模式 ...................................................................................................12 
第2章 开放平台整体架构.............................................................15 
2.1 2.2 
2.3 
2.4 
功能架构 ···············································································.16 API 网关系统··········································································.18 
2.2.1 API 整体架构 .......................................................................................................18 
2.2.2 API 网关与授权系统的关系................................................................................19 
控制台系统 ············································································.20 2.3.1 功能概述...............................................................................................................20 
2.3.2 控制台系统与授权系统的关系 ...........................................................................20 
服务市场 ···············································································.21 
第3章 实战中的授权模式.............................................................22 
3.1 
3.2 3.3 
授权码授权模式的应用 ·····························································.23 
3.1.1 获取 code ..............................................................................................................23 
3.1.2 获取授权信息.......................................................................................................27 
3.1.3 刷新授权信息.......................................................................................................30 
用户名密码授权码授权模式的应用 ··············································.31 授信客户端密码模式的应用 ·······················································.333.4 
3.5 
授信客户端模式的应用 ·····························································.34 
3.4.1 标准授信客户端模式 ...........................................................................................34 
3.4.2 自研应用...............................................................................................................35 
3.4.3 自研授信客户端授权 ...........................................................................................35 
插件化授权模式的应用 ·····························································.36 3.5.1 普通应用场景.......................................................................................................37 3.5.2 官方应用场景.......................................................................................................42 
第4章 OpenID从理论到实战.......................................................48 
4.1 
4.2 
4.3 
4.4 
4.5 
OpenID 概述···········································································.49 
4.1.1 OpenID 定义 .........................................................................................................49 
4.1.2 OpenID 使用流程 .................................................................................................50 
4.1.3 OpenID 与 OAuth 2