spring security 5.1 oauth 2, how to add additional parameters to user authentication uri

问题

I'm trying to integrate external oauth 2 authentication server and resource server. Their configuration requires some additional custom parameters: state - should be uuid, TimeStamp, accessType, also clientSecret should be signed using a combination of all previous params as data.

We are using Spring boot, spring security 5.1, Camunda.

The catch is I can't directly add params to URI calling method setUserAuthorizationUri cause this method is called only once during initialization

回答1:

The OAuth2AuthorizationRequestResolver provides the ability to customize the Authorization Request with additional parameters above the standard parameters and/or removing/changing one of the standard parameters. See the reference doc on OAuth2AuthorizationRequestResolver for implementation details.

来源：https://stackoverflow.com/questions/52890748/spring-security-5-1-oauth-2-how-to-add-additional-parameters-to-user-authentica