[Java] Spring Security OAuth 个性化token的使用

{
 "access_token": "e6669cdf-b6cd-43fe-af5c-f91a65041382",
 "token_type": "bearer",
 "refresh_token": "da91294d-446c-4a89-bdcf-88aee15a75e8",
 "expires_in": 43199, 
 "scope": "server"
}

{
 "access_token":"a6f3b6d6-93e6-4eb8-a97d-3ae72240a7b0",
 "token_type":"bearer",
 "refresh_token":"710ab162-a482-41cd-8bad-26456af38e4f",
 "expires_in":42396,
 "scope":"server",
 "tenant_id":1,
 "license":"made by pigx",
 "dept_id":1,
 "user_id":1,
 "username":"admin"
}

protected oauth2authentication getoauth2authentication(clientdetails client, tokenrequest tokenrequest) {
 map<string, string> parameters = new linkedhashmap<string, string>(tokenrequest.getrequestparameters());
 string username = parameters.get("username");
 string password = parameters.get("password");
 // protect from downstream leaks of password
 parameters.remove("password");
 authentication userauth = new usernamepasswordauthenticationtoken(username, password);
 ((abstractauthenticationtoken) userauth).setdetails(parameters);
  
 userauth = authenticationmanager.authenticate(userauth);
 
 oauth2request storedoauth2request = getrequestfactory().createoauth2request(client, tokenrequest);  
  return new oauth2authentication(storedoauth2request, userauth);
}

protected oauth2accesstoken getaccesstoken(clientdetails client, tokenrequest tokenrequest) {
 return tokenservices.createaccesstoken(getoauth2authentication(client, tokenrequest));
}

public oauth2accesstoken createaccesstoken(oauth2authentication authentication) throws authenticationexception {
 
 ... 一系列判断 ，合法性、是否过期等判断 
 oauth2accesstoken accesstoken = createaccesstoken(authentication, refreshtoken);
  tokenstore.storeaccesstoken(accesstoken, authentication);
  // in case it was modified
  refreshtoken = accesstoken.getrefreshtoken();
  if (refreshtoken != null) {
   tokenstore.storerefreshtoken(refreshtoken, authentication);
  }
  return accesstoken;
}

// 默认刷新token 的有效期
private int refreshtokenvalidityseconds = 60 * 60 * 24 * 30; // default 30 days.
// 默认token 的有效期
private int accesstokenvalidityseconds = 60 * 60 * 12; // default 12 hours.
 
private oauth2accesstoken createaccesstoken(oauth2authentication authentication, oauth2refreshtoken refreshtoken) {
 defaultoauth2accesstoken token = new defaultoauth2accesstoken(uuid);
 token.setexpiration(date)
 token.setrefreshtoken(refreshtoken);
 token.setscope(authentication.getoauth2request().getscope());
 return accesstokenenhancer != null ? accesstokenenhancer.enhance(token, authentication) : token;
}

public oauth2accesstoken enhance(oauth2accesstoken accesstoken, oauth2authentication authentication) {
 final map<string, object> additionalinfo = new hashmap<>(8);
 pigxuser pigxuser = (pigxuser) authentication.getuserauthentication().getprincipal();
 additionalinfo.put("user_id", pigxuser.getid());
 additionalinfo.put("username", pigxuser.getusername());
 additionalinfo.put("dept_id", pigxuser.getdeptid());
 additionalinfo.put("tenant_id", pigxuser.gettenantid());
 additionalinfo.put("license", securityconstants.pigx_license);
 ((defaultoauth2accesstoken) accesstoken).setadditionalinformation(additionalinfo);
 return accesstoken;
}