ResourceId 在带有 Spring Security 的 OAuth 2.0 中意味着什么

在带有Spring Security的OAuth 2.0中，ResourceId指的是资源的唯一标识符。它可以是一个URL、一个API端点或者一个特定的功能模块。ResourceId的存在意味着系统中的不同资源可以被正确地鉴权和授权，从而实现安全的访问控制。

xml
    org.springframework.boot
    spring-boot-starter-security
    org.springframework.boot
    spring-boot-starter-oauth2-client
    org.springframework.boot
    spring-boot-starter-oauth2-resource-server

yaml
spring:
  security:
    oauth2:
      resourceserver:
        jwt:
          jwk-set-uri: https://example.com/.well-known/jwks.json

java
@RestController
public class MyController {
    @PreAuthorize("hasRole('ROLE_ADMIN')")
    @GetMapping("/admin")
    public String adminEndpoint() {
        return "Hello Admin!";
    }
    @GetMapping("/public")
    public String publicEndpoint() {
        return "Hello Public!";
    }
}

java
@Configuration
@EnableWebSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter {
    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http.authorizeRequests()
            .antMatchers("/public").permitAll()
            .anyRequest().authenticated()
            .and()
            .oauth2ResourceServer()
            .jwt();
    }
}