我创造了
Authorization Server
Resource Server
它可以很好地与
password
我想测试来自邮递员的授权代码流。我发送这样一个请求以获取访问代码:
http://localhost:1111/oauth/authorize?response_type=code&client_id=test_client&redirect_uri=www.test_something.com
{
"timestamp": "2018-09-27T21:02:14Z",
"status": 500,
"error": "Internal Server Error",
"exception": "org.springframework.security.authentication.InsufficientAuthenticationException",
"message": "User must be authenticated with Spring Security before authorization can be completed.",
"path": "/oauth/authorize"
}
我试图将用户名和密码发送到
Basic Authentication HTTP headers
POST
请求,但没用。