問(wèn)題描述
我正在關(guān)注 Azure 文檔的以下兩個(gè)教程:https://docs.microsoft.com/en-us/azure/java/spring-framework/deploy-spring-boot-java-app-with-maven-plugin它展示了如何將一個(gè)簡(jiǎn)單的 Spring Boot 應(yīng)用程序部署到 Azure 和https://docs.microsoft.com/en-us/azure/java/spring-framework/configure-spring-boot-starter-java-app-with-azure-active-directory使用 Spring Security OAuth2 客戶端設(shè)置和使用活動(dòng)目錄作為 OAuth2 服務(wù)器.基本上我只是將 OAuth2 依賴項(xiàng)添加到 Maven、WebSecurityConfig 類，如第二個(gè)文檔中所示，另外還有 azure.activedirectoy 和 spring.security 屬性.
I am following the following two tutorials of the Azure documentation: https://docs.microsoft.com/en-us/azure/java/spring-framework/deploy-spring-boot-java-app-with-maven-plugin which shows how to deploy a simple Spring Boot application to Azure and https://docs.microsoft.com/en-us/azure/java/spring-framework/configure-spring-boot-starter-java-app-with-azure-active-directory to set up and use an active directory as OAuth2 server with a Spring Security OAuth2 Client. Basically I just add the OAuth2 dependencies to Maven, a WebSecurityConfig class as shown in the second document and additionally also the azure.activedirectoy and spring.security properties.
當(dāng)應(yīng)用程序從我的本地計(jì)算機(jī)運(yùn)行時(shí)，登錄和重定向工作正常.但是當(dāng)應(yīng)用程序部署到 Azure 時(shí)，我收到一個(gè)應(yīng)用程序錯(cuò)誤消息:無(wú)效的重定向 URI 參數(shù).我想我已將重定向 uri 正確設(shè)置為
When the application is just run from my local computer the login and redirection works fine. But when the application is deployed to Azure, I get an application error saying: Invalid Redirect URI Parameter. I think I have set the redirect-uri correctly as
https://{baseHost}{basePort}{basePath}/login/oauth2/code/azure
在應(yīng)用程序?qū)傩灾幸约霸谖业?Active Directory 中的應(yīng)用程序注冊(cè)中.
in the application properties as well as in the application registration with my Active Directory.
據(jù)我所知，授權(quán)請(qǐng)求使用了正確的參數(shù):
As far as I can see the authorization request uses the right parameters:
response_type: code
client_id: 4b5fbcfd-c35f-4bab-bc45-374c7e1dead8
scope: openid https://graph.microsoft.com/user.read
state: yMvo62R-6vgjETSGr_mnh4iIMZimVnFYZRyiGFaOPtE=
redirect_uri: https://myappname.azurewebsites.net/login/oauth2/code/azure
nonce: FUXJ5GoJ2NuNVx2ORU70YCqnJkEj8FRYHEJYMutEQzo
那么，無(wú)效的重定向 URI 參數(shù)是什么，我該如何更改?
So, what could the Invalid Redirect URI Parameter be, and how can I change this?
推薦答案
我按照這兩個(gè)教程，在本地環(huán)境下運(yùn)行良好，在 Azure webapp 上，我遇到了重定向 url 不匹配錯(cuò)誤.
I followed these two tutorials, it works fine on local environment, on Azure webapp, I encountered redirect url mismatch error.
原因是redirect_uri總是以http開(kāi)頭.在 applications.properties 中添加 server.forward-headers-strategy=native 后，它就可以工作了.(我使用的是spring boot 2.2)
The cause is that the redirect_uri is always started with http. After adding server.forward-headers-strategy=native in applications.properties, it works. (I am using spring boot 2.2)
這里是 pom.xml 供您參考.
Here is the pom.xml for your reference.
<?xml version="1.0" encoding="UTF-8"?>
<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">
<modelVersion>4.0.0</modelVersion>
<parent>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-parent</artifactId>
<version>2.2.4.RELEASE</version>
<relativePath/>
<!-- lookup parent from repository -->
</parent>
<groupId>com.example.ad</groupId>
<artifactId>ad</artifactId>
<version>0.0.1-SNAPSHOT</version>
<name>ad</name>
<description>Demo project for Spring Boot</description>
<properties>
<java.version>1.8</java.version>
<azure.version>2.2.0</azure.version>
</properties>
<dependencies>
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-security</artifactId>
</dependency>
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-web</artifactId>
</dependency>
<dependency>
<groupId>com.microsoft.azure</groupId>
<artifactId>azure-active-directory-spring-boot-starter</artifactId>
</dependency>
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-test</artifactId>
<scope>test</scope>
<exclusions>
<exclusion>
<groupId>org.junit.vintage</groupId>
<artifactId>junit-vintage-engine</artifactId>
</exclusion>
</exclusions>
</dependency>
<dependency>
<groupId>org.springframework.security</groupId>
<artifactId>spring-security-test</artifactId>
<scope>test</scope>
</dependency>
<dependency>
<groupId>org.springframework.security</groupId>
<artifactId>spring-security-oauth2-client</artifactId>
</dependency>
<dependency>
<groupId>org.springframework.security</groupId>
<artifactId>spring-security-oauth2-jose</artifactId>
</dependency>
</dependencies>
<dependencyManagement>
<dependencies>
<dependency>
<groupId>com.microsoft.azure</groupId>
<artifactId>azure-spring-boot-bom</artifactId>
<version>${azure.version}</version>
<type>pom</type>
<scope>import</scope>
</dependency>
</dependencies>
</dependencyManagement>
<build>
<plugins>
<plugin>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-maven-plugin</artifactId>
</plugin>
<plugin>
<groupId>com.microsoft.azure</groupId>
<artifactId>azure-webapp-maven-plugin</artifactId>
<version>1.9.0</version>
<configuration>
<schemaVersion>V2</schemaVersion>
<resourceGroup>ad-1582615028467-rg</resourceGroup>
<appName>ad-1582615028467</appName>
<pricingTier>P1v2</pricingTier>
<region>westeurope</region>
<runtime>
<os>linux</os>
<javaVersion>jre8</javaVersion>
<webContainer>jre8</webContainer>
</runtime>
<appSettings>
<property>
<name>JAVA_OPTS</name>
<value>-Dserver.port=80</value>
</property>
</appSettings>
<deployment>
<resources>
<resource>
<directory>${project.basedir}/target</directory>
<includes>
<include>*.jar</include>
</includes>
</resource>
</resources>
</deployment>
</configuration>
</plugin>
</plugins>
</build>
</project>
這篇關(guān)于使用 Active Directory 的 Azure 上 Spring OAuth2 應(yīng)用程序的重定向 URL:無(wú)效的重定向 URI 參數(shù)的文章就介紹到這了，希望我們推薦的答案對(duì)大家有所幫助，也希望大家多多支持html5模板網(wǎng)！