使用 Java 使用 OAuth 工具在 WSO2 Identity Server 中创建服务提供者

Question

我正在开发一个 Java 客户端，它动态创建服务提供者，在 WSO2 身份服务器中将入站身份验证设置为 OAuth。代码如下

import java.rmi.RemoteException;
import java.util.HashMap;
import java.util.Map;

import org.apache.axis2.client.Options;
import org.apache.axis2.client.ServiceClient;
import org.apache.axis2.context.ConfigurationContext;
import org.apache.axis2.context.ConfigurationContextFactory;
import org.apache.axis2.transport.http.HTTPConstants;
import org.apache.axis2.transport.http.HttpTransportProperties;
import org.wso2.carbon.authenticator.proxy.AuthenticationAdminStub;
import org.wso2.carbon.um.ws.api.WSRealmBuilder;
import org.wso2.carbon.um.ws.api.stub.ClaimValue;
import org.wso2.carbon.user.core.UserRealm;
import org.wso2.carbon.user.core.UserStoreManager;
import org.wso2.carbon.identity.application.common.model.xsd.InboundAuthenticationConfig;
import org.wso2.carbon.identity.application.common.model.xsd.InboundAuthenticationRequestConfig;
import org.wso2.carbon.identity.application.common.model.xsd.ServiceProvider;
import org.wso2.carbon.identity.application.mgt.stub.IdentityApplicationManagementServiceStub;

import org.wso2.carbon.identity.oauth.stub.*;
import org.wso2.carbon.identity.oauth.stub.dto.OAuthConsumerAppDTO;

public class IdentityClient {


    private final static String SERVER_URL = "https://localhost:9443/services/";

    public static void main(String[] args) throws RemoteException, OAuthAdminServiceException {    

        String appName = "Sample_App_3";

        System.setProperty("javax.net.ssl.trustStore", "wso2carbon.jks");
        System.setProperty("javax.net.ssl.trustStorePassword", "wso2carbon");

        try {

            OAuthAdminServiceStub stub = new OAuthAdminServiceStub(null,
                    SERVER_URL + "OAuthAdminService");
            IdentityApplicationManagementServiceStub IAMStub = new IdentityApplicationManagementServiceStub(
                    null, SERVER_URL + "IdentityApplicationManagementService");
            ServiceClient client = stub._getServiceClient();
            ServiceClient IAMClient = IAMStub._getServiceClient();
            authenticate(client);

            OAuthConsumerAppDTO consumerApp = new OAuthConsumerAppDTO();
            consumerApp.setApplicationName(appName);
            consumerApp.setOAuthVersion("OAuth-2.0");
            consumerApp.setCallbackUrl("http://localhost:8080/playground2/oauth2client");
            consumerApp.setGrantTypes(
                    "authorization_code implicit password client_credentials refresh_token "
                            + "urn:ietf:params:oauth:grant-type:saml2-bearer iwa:ntlm");

            /* OAuthAdminProxy.registerOAuthApplicationData(consumerApp); */
            stub.registerOAuthApplicationData(consumerApp);
            System.out.println("Application created successfully");

            authenticate(IAMClient);

            InboundAuthenticationRequestConfig iaReqConfig = new InboundAuthenticationRequestConfig();
            iaReqConfig.setInboundAuthKey(stub.getOAuthApplicationDataByAppName(appName)
                    .getOauthConsumerKey());
            iaReqConfig.setInboundAuthType(stub.getOAuthApplicationDataByAppName(appName)
                    .getOauthConsumerSecret());


            InboundAuthenticationRequestConfig[] iaReqConfigList = { iaReqConfig };

            InboundAuthenticationConfig ib = new InboundAuthenticationConfig();

            ib.setInboundAuthenticationRequestConfigs(iaReqConfigList);

            ServiceProvider serviceProvider = new ServiceProvider();
            serviceProvider.setApplicationName(
                    stub.getOAuthApplicationDataByAppName(appName).getApplicationName());
            serviceProvider.setInboundAuthenticationConfig(ib);

            IAMStub.createApplication(serviceProvider);

            System.out.println("Service Provider created");

        } catch (Exception e) {
            e.printStackTrace();
        }
    }

    public static void authenticate(ServiceClient client) {
        Options option = client.getOptions();
        HttpTransportProperties.Authenticator auth = new HttpTransportProperties.Authenticator();
        auth.setUsername("admin");
        auth.setPassword("admin");
        auth.setPreemptiveAuthentication(true);
        option.setProperty(org.apache.axis2.transport.http.HTTPConstants.AUTHENTICATE, auth);
        option.setManageSession(true);
    }

}

一旦我运行这段代码，服务提供商就会在我可以在管理控制台中看到的 WSO2 身份服务器中创建。针对服务提供商完成的 OAuth 配置没有显示，它是空的，只有 'configure' link。如果我正确理解 WSO2 IS，那么我应该在入站身份验证配置下获取消费者密钥和消费者秘密 --> OAuth/OpenID 连接配置下拉列表。

请帮我看看应该怎么做才对？

Answer 1

尝试如下更改您的客户端，

import java.rmi.RemoteException;

import org.apache.axis2.client.Options;
import org.apache.axis2.client.ServiceClient;
import org.apache.axis2.transport.http.HttpTransportProperties;
import org.wso2.carbon.identity.application.common.model.xsd.InboundAuthenticationConfig;
import org.wso2.carbon.identity.application.common.model.xsd.InboundAuthenticationRequestConfig;
import org.wso2.carbon.identity.application.common.model.xsd.Property;
import org.wso2.carbon.identity.application.common.model.xsd.ServiceProvider;
import org.wso2.carbon.identity.application.mgt.stub.IdentityApplicationManagementServiceStub;

import org.wso2.carbon.identity.oauth.stub.OAuthAdminServiceException;
import org.wso2.carbon.identity.oauth.stub.OAuthAdminServiceStub;
import org.wso2.carbon.identity.oauth.stub.dto.OAuthConsumerAppDTO;

public class IdentityClient {
    private final static String SERVER_URL = "https://localhost:9443/services/";

    public static void main(String[] args) throws RemoteException, OAuthAdminServiceException {

        String appName = "Sample_App_5";
        String appDescription = "Test description";

        System.setProperty("javax.net.ssl.trustStore", "wso2carbon.jks");
        System.setProperty("javax.net.ssl.trustStorePassword", "wso2carbon");

        try {

            OAuthAdminServiceStub stub = new OAuthAdminServiceStub(null,
                    SERVER_URL + "OAuthAdminService");
            IdentityApplicationManagementServiceStub IAMStub = new IdentityApplicationManagementServiceStub(
                    null, SERVER_URL + "IdentityApplicationManagementService");
            ServiceClient client = stub._getServiceClient();
            ServiceClient IAMClient = IAMStub._getServiceClient();
            authenticate(client);

            authenticate(IAMClient);
            ServiceProvider serviceProvider = new ServiceProvider();
            serviceProvider.setApplicationName(appName);
            serviceProvider.setDescription(appDescription);
            IAMStub.createApplication(serviceProvider);

            OAuthConsumerAppDTO consumerApp = new OAuthConsumerAppDTO();
            consumerApp.setApplicationName(appName);
            consumerApp.setOAuthVersion("OAuth-2.0");
            consumerApp.setCallbackUrl("http://localhost:8080/playground2/oauth2client");
            consumerApp.setGrantTypes(
                    "authorization_code implicit password client_credentials refresh_token "
                            + "urn:ietf:params:oauth:grant-type:saml2-bearer iwa:ntlm");

            /* OAuthAdminProxy.registerOAuthApplicationData(consumerApp); */
            stub.registerOAuthApplicationData(consumerApp);
            System.out.println("Application created successfully");
            System.out.println(stub.getOAuthApplicationDataByAppName(appName).getOauthConsumerKey());

            authenticate(IAMClient);

            InboundAuthenticationRequestConfig iaReqConfig = new InboundAuthenticationRequestConfig();
            iaReqConfig.setInboundAuthKey(stub.getOAuthApplicationDataByAppName(appName).getOauthConsumerKey());
            iaReqConfig.setInboundAuthType("oauth2");

            Property property = new Property();
            property.setName("oauthConsumerSecret");
            property.setValue(stub.getOAuthApplicationDataByAppName(appName).getOauthConsumerSecret());
            Property[] properties = { property };
            iaReqConfig.setProperties(properties);

            InboundAuthenticationRequestConfig[] iaReqConfigList = { iaReqConfig };

            InboundAuthenticationConfig ib = new InboundAuthenticationConfig();

            ib.setInboundAuthenticationRequestConfigs(iaReqConfigList);

            serviceProvider = IAMStub.getApplication(appName);
            serviceProvider.setApplicationName(
                    stub.getOAuthApplicationDataByAppName(appName).getApplicationName());
            serviceProvider.setInboundAuthenticationConfig(ib);

            IAMStub.updateApplication(serviceProvider);

            System.out.println("Service Provider created");

        } catch (Exception e) {
            e.printStackTrace();
        }
    }

    public static void authenticate(ServiceClient client) {
        Options option = client.getOptions();
        HttpTransportProperties.Authenticator auth = new HttpTransportProperties.Authenticator();
        auth.setUsername("admin");
        auth.setPassword("admin");
        auth.setPreemptiveAuthentication(true);
        option.setProperty(org.apache.axis2.transport.http.HTTPConstants.AUTHENTICATE, auth);
        option.setManageSession(true);
    }
}

问题是 createApplication 不保存名称和描述以外的配置。您必须调用 updateApplication 来保存其他应用程序配置。

使用 Java 使用 OAuth 工具在 WSO2 Identity Server 中创建服务提供者

Creating service provider in WSO2 Identity Server with OAuth facility using Java

java

oauth

wso2is