SpringBoot集成Spotify OAuth2认证报错：authorizationUri为空及未知Provider Id

由于Spotify不在Spring Security默认的OAuth2提供商列表中，框架无法自动填充其授权、令牌等端点信息，这是导致authorizationUri cannot be empty异常的核心原因。以下是具体的排查和解决步骤：

1. 手动配置Spotify OAuth2端点（配置文件方式） #

在application.yml或application.properties中，必须显式指定Spotify的提供商端点信息，确保注册信息与提供商ID匹配：

application.yml示例： #

spring:
  security:
    oauth2:
      client:
        registration:
          spotify:
            client-id: 你的ClientID
            client-secret: 你的ClientSecret
            redirect-uri: "{baseUrl}/login/oauth2/code/spotify"
            scope: user-read-email,user-read-private
            client-name: Spotify
        provider:
          spotify:
            authorization-uri: https://accounts.spotify.com/authorize
            token-uri: https://accounts.spotify.com/api/token
            user-info-uri: https://api.spotify.com/v1/me
            user-name-attribute: id

2. 手动构建ClientRegistration（Java配置类方式） #

如果使用Java配置类（如SpotifyOAuth2Config），需直接构建ClientRegistration对象并显式设置端点：

import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.security.oauth2.client.registration.ClientRegistration;
import org.springframework.security.oauth2.client.registration.ClientRegistrationRepository;
import org.springframework.security.oauth2.client.registration.InMemoryClientRegistrationRepository;
import org.springframework.security.oauth2.core.AuthorizationGrantType;
import org.springframework.security.oauth2.core.ClientAuthenticationMethod;

@Configuration
public class SpotifyOAuth2Config {

    @Bean
    public ClientRegistrationRepository clientRegistrationRepository() {
        return new InMemoryClientRegistrationRepository(spotifyClientRegistration());
    }

    private ClientRegistration spotifyClientRegistration() {
        return ClientRegistration.withRegistrationId("spotify")
                .clientId("你的ClientID")
                .clientSecret("你的ClientSecret")
                .clientAuthenticationMethod(ClientAuthenticationMethod.CLIENT_SECRET_BASIC)
                .authorizationGrantType(AuthorizationGrantType.AUTHORIZATION_CODE)
                .redirectUri("{baseUrl}/login/oauth2/code/spotify")
                .scope("user-read-email", "user-read-private")
                .authorizationUri("https://accounts.spotify.com/authorize")
                .tokenUri("https://accounts.spotify.com/api/token")
                .userInfoUri("https://api.spotify.com/v1/me")
                .userNameAttributeName("id")
                .clientName("Spotify")
                .build();
    }
}

3. 检查SecurityConfig的关联配置 #

确保SecurityConfig正确关联客户端注册信息，示例：

import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
import org.springframework.security.web.SecurityFilterChain;

@Configuration
@EnableWebSecurity
public class SecurityConfig {

    private final ClientRegistrationRepository clientRegistrationRepository;

    public SecurityConfig(ClientRegistrationRepository clientRegistrationRepository) {
        this.clientRegistrationRepository = clientRegistrationRepository;
    }

    @Bean
    public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception {
        http
                .authorizeHttpRequests(auth -> auth.anyRequest().authenticated())
                .oauth2Login(oauth2 -> oauth2.clientRegistrationRepository(clientRegistrationRepository));
        return http.build();
    }
}

4. 常见错误排查 #

• 注册信息与提供商ID不匹配：比如registration下的ID是spotify，但provider下的ID写成spotify-auth，导致框架无法关联端点配置。
• 端点URL拼写错误：比如将https写成http，或端点路径拼写错误。
• 配置项名称错误：比如把authorization-uri写成authorization-url，导致框架无法识别配置项。

内容的提问来源于stack exchange，提问作者Ahmad Bilal