import org.springframework.security.oauth2.provider.authentication.OAuth2AuthenticationProcessingFilter; //导入依赖的package包/类
private Filter resourceOAuthFilter() {
    final DefaultTokenServices remoteTokenService = new DefaultTokenServices();
    remoteTokenService.setTokenStore(jwtTokenStore());
    final OAuth2AuthenticationManager oauth2Manager = new OAuth2AuthenticationManager();
    oauth2Manager.setTokenServices(remoteTokenService);
    final OAuth2AuthenticationProcessingFilter oAuth2AuthenticationProcessingFilter = new OAuth2AuthenticationProcessingFilter();
    oAuth2AuthenticationProcessingFilter.setTokenExtractor(new BearerTokenExtractor());
    oAuth2AuthenticationProcessingFilter.setAuthenticationManager(oauth2Manager);
    return oAuth2AuthenticationProcessingFilter;
}
 

import org.springframework.security.oauth2.provider.authentication.OAuth2AuthenticationProcessingFilter; //导入依赖的package包/类
@Override public Object postProcessBeforeInitialization(Object bean, String beanName)
    throws BeansException {

    final String AUTHENTICATION_BEAN_TO_REPLACE = "OAuth2AuthenticationProcessingFilter";

    if (beanName.contains(AUTHENTICATION_BEAN_TO_REPLACE)) {

        OAuth2AuthenticationProcessingFilter authenticationMock =
            mock(OAuth2AuthenticationProcessingFilter.class);

        try {
            Mockito.doAnswer(this::authenticateEverything)
                .when(authenticationMock).doFilter(any(), any(), any());

        } catch (IOException | ServletException e) {
        	logger.error("Error: {}", e);
            throw new BeanCreationException(
                String.format("Cannot mock '%s'", AUTHENTICATION_BEAN_TO_REPLACE));
        }

        return authenticationMock;
    }

    return bean;
}
 

import org.springframework.security.oauth2.provider.authentication.OAuth2AuthenticationProcessingFilter; //导入依赖的package包/类
@Override
@SuppressWarnings("unchecked")
public void configure(HttpSecurity http) throws Exception {

    AuthenticationManager oauthAuthenticationManager = oauthAuthenticationManager(http);
    resourcesServerFilter = new OAuth2AuthenticationProcessingFilter();
    resourcesServerFilter.setAuthenticationManager(oauthAuthenticationManager);
    resourcesServerFilter = postProcess(resourcesServerFilter);

    http.authorizeRequests().expressionHandler(expressionHandler).and()
            .addFilterBefore(resourcesServerFilter, AbstractPreAuthenticatedProcessingFilter.class)
            .getConfigurer(ExceptionHandlingConfigurer.class).accessDeniedHandler(accessDeniedHandler);

}
 

import org.springframework.security.oauth2.provider.authentication.OAuth2AuthenticationProcessingFilter; //导入依赖的package包/类
@Test
public void testAuthenticationManager() {
	GenericXmlApplicationContext context = new GenericXmlApplicationContext(
			getClass(), "resource-server-authmanager-context.xml");
	// System.err.println(Arrays.asList(context.getBeanDefinitionNames()));
	assertTrue(context.containsBeanDefinition("oauth2ProviderFilter"));
	OAuth2AuthenticationProcessingFilter filter = context.getBean(OAuth2AuthenticationProcessingFilter.class);
	assertEquals(context.getBean(AuthenticationManager.class), ReflectionTestUtils.getField(filter, "authenticationManager"));
	assertNotNull(ReflectionTestUtils.getField(filter, "tokenExtractor"));
	context.close();
}
 

import org.springframework.security.oauth2.provider.authentication.OAuth2AuthenticationProcessingFilter; //导入依赖的package包/类
@Bean
public FilterRegistrationBean disableDefaultOAuth(OAuth2AuthenticationProcessingFilter filter) {
    FilterRegistrationBean registration = new FilterRegistrationBean(filter);
    registration.setEnabled(false);
    return registration;
}
 

import org.springframework.security.oauth2.provider.authentication.OAuth2AuthenticationProcessingFilter; //导入依赖的package包/类
@Override
protected AbstractBeanDefinition parseEndpointAndReturnFilter(Element element, ParserContext parserContext,
		String tokenServicesRef, String serializerRef) {

	String resourceId = element.getAttribute("resource-id");
	String entryPointRef = element.getAttribute("entry-point-ref");
	String authenticationManagerRef = element.getAttribute("authentication-manager-ref");
	String tokenExtractorRef = element.getAttribute("token-extractor-ref");
	String entryAuthDetailsSource = element.getAttribute("auth-details-source-ref");

	// configure the protected resource filter
	BeanDefinitionBuilder protectedResourceFilterBean = BeanDefinitionBuilder
			.rootBeanDefinition(OAuth2AuthenticationProcessingFilter.class);

	if (StringUtils.hasText(authenticationManagerRef)) {
		protectedResourceFilterBean.addPropertyReference("authenticationManager", authenticationManagerRef);
	}
	else {

		BeanDefinitionBuilder authenticationManagerBean = BeanDefinitionBuilder
				.rootBeanDefinition(OAuth2AuthenticationManager.class);
		
		authenticationManagerBean.addPropertyReference("tokenServices", tokenServicesRef);

		if (StringUtils.hasText(resourceId)) {
			authenticationManagerBean.addPropertyValue("resourceId", resourceId);
		}

		protectedResourceFilterBean.addPropertyValue("authenticationManager",
				authenticationManagerBean.getBeanDefinition());

	}

	if (StringUtils.hasText(entryPointRef)) {
		protectedResourceFilterBean.addPropertyReference("authenticationEntryPoint", entryPointRef);
	}

	if (StringUtils.hasText(entryAuthDetailsSource)) {
		protectedResourceFilterBean.addPropertyReference("authenticationDetailsSource", entryAuthDetailsSource);
	}

	if (StringUtils.hasText(tokenExtractorRef)) {
		protectedResourceFilterBean.addPropertyReference("tokenExtractor", tokenExtractorRef);
	}

	return protectedResourceFilterBean.getBeanDefinition();

}
 

import org.springframework.security.oauth2.provider.authentication.OAuth2AuthenticationProcessingFilter; //导入依赖的package包/类
/**
 * Install RefreshTokenFilter as a servlet Filter.
 */
@Override
public void configure(HttpSecurity http) throws Exception {
    RefreshTokenFilter customFilter = new RefreshTokenFilter(authenticationService, tokenStore);
    http.addFilterBefore(customFilter, OAuth2AuthenticationProcessingFilter.class);
}