Spring Boot keycloak 和基本身份验证一起在同一个项目中

使用Spring Boot和Keycloak实现身份验证

xml
    org.keycloak
    keycloak-spring-boot-starter

properties
# Keycloak配置
keycloak.realm=your-realm
keycloak.auth-server-url=http://localhost:8080/auth
keycloak.ssl-required=external
keycloak.resource=your-client-id
keycloak.credentials.secret=your-client-secret
keycloak.use-resource-role-mappings=true
keycloak.securityConstraints[0].authRoles[0]=user
keycloak.securityConstraints[0].securityCollections[0].name=protected-resource
keycloak.securityConstraints[0].securityCollections[0].patterns[0]=/protected/*

java
@Configuration
@EnableWebSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter {
    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http.authorizeRequests()
                .antMatchers("/protected/**").hasRole("user")
                .anyRequest().permitAll()
                .and().csrf().disable();
    }
}

xml
    org.springframework.boot
    spring-boot-starter-security

java
@Configuration
public class SecurityConfig extends WebSecurityConfigurerAdapter {
    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http.authorizeRequests()
                .antMatchers("/protected/**").hasRole("user")
                .anyRequest().permitAll()
                .and().httpBasic()
                .and().csrf().disable();
    }
}

java
@RestController
public class ProtectedController {
    @GetMapping("/protected/resource")
    public String protectedResource() {
        return "This is a protected resource!";
    }
}