如何自定义Spring发送给已配置身份提供商的OAUTH2授权请求URL

1. Spring Security OAuth2 Client（Spring Boot 2.x+ 主流方案） #

方式一：配置文件直接指定 #

在application.yml或application.properties里，针对目标客户端配置身份提供商的自定义授权URL：

spring:
  security:
    oauth2:
      client:
        registration:
          my-custom-client: # 替换成你的客户端标识ID
            client-id: your-client-id
            client-secret: your-client-secret
            authorization-grant-type: authorization_code
            redirect-uri: "{baseUrl}/login/oauth2/code/{registrationId}"
            scope: openid,profile,email
        provider:
          my-custom-client: # 与registration下的标识ID保持一致
            authorization-uri: https://your-idp-domain.com/custom-authorize-endpoint # 自定义的授权请求URL
            token-uri: https://your-idp-domain.com/token
            user-info-uri: https://your-idp-domain.com/userinfo
            user-name-attribute: sub

核心是在provider节点下配置authorization-uri，替换为身份提供商提供的自定义授权端点。

方式二：Java配置类自定义（灵活场景） #

如果需要动态生成URL或更复杂的配置逻辑，可通过自定义ClientRegistrationRepository实现：

import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.security.oauth2.client.registration.ClientRegistration;
import org.springframework.security.oauth2.client.registration.ClientRegistrationRepository;
import org.springframework.security.oauth2.client.registration.InMemoryClientRegistrationRepository;
import org.springframework.security.oauth2.core.AuthorizationGrantType;
import org.springframework.security.oauth2.core.ClientAuthenticationMethod;

@Configuration
public class OAuth2ClientConfig {

    @Bean
    public ClientRegistrationRepository clientRegistrationRepository() {
        return new InMemoryClientRegistrationRepository(customClientRegistration());
    }

    private ClientRegistration customClientRegistration() {
        return ClientRegistration.withRegistrationId("my-custom-client")
                .clientId("your-client-id")
                .clientSecret("your-client-secret")
                .clientAuthenticationMethod(ClientAuthenticationMethod.CLIENT_SECRET_BASIC)
                .authorizationGrantType(AuthorizationGrantType.AUTHORIZATION_CODE)
                .redirectUri("{baseUrl}/login/oauth2/code/{registrationId}")
                .scope("openid", "profile", "email")
                .authorizationUri("https://your-idp-domain.com/custom-authorize-endpoint") // 自定义授权URL
                .tokenUri("https://your-idp-domain.com/token")
                .userInfoUri("https://your-idp-domain.com/userinfo")
                .userNameAttributeName("sub")
                .build();
    }
}

2. 传统Spring Security OAuth2（旧版框架） #

如果使用的是Spring Security OAuth 2.x旧版本，可通过AuthorizationCodeResourceDetails指定授权URL：

import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.security.oauth2.client.OAuth2ClientContext;
import org.springframework.security.oauth2.client.OAuth2RestTemplate;
import org.springframework.security.oauth2.client.resource.OAuth2ProtectedResourceDetails;
import org.springframework.security.oauth2.client.token.grant.code.AuthorizationCodeResourceDetails;
import java.util.Arrays;

@Configuration
public class OldOAuth2Config {

    @Bean
    public OAuth2ProtectedResourceDetails customResourceDetails() {
        AuthorizationCodeResourceDetails details = new AuthorizationCodeResourceDetails();
        details.setClientId("your-client-id");
        details.setClientSecret("your-client-secret");
        details.setAccessTokenUri("https://your-idp-domain.com/token");
        details.setUserAuthorizationUri("https://your-idp-domain.com/custom-authorize-endpoint"); // 自定义授权请求URL
        details.setScope(Arrays.asList("openid", "profile", "email"));
        details.setUseCurrentUri(false);
        return details;
    }

    @Bean
    public OAuth2RestTemplate oAuth2RestTemplate(OAuth2ClientContext oAuth2ClientContext) {
        return new OAuth2RestTemplate(customResourceDetails(), oAuth2ClientContext);
    }
}

3. 动态修改授权请求（附加自定义参数） #

如果需要在授权请求中添加额外参数，可通过OAuth2AuthorizationRequestResolver扩展：

import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.security.oauth2.client.registration.ClientRegistrationRepository;
import org.springframework.security.oauth2.client.web.DefaultOAuth2AuthorizationRequestResolver;
import org.springframework.security.oauth2.client.web.OAuth2AuthorizationRequestResolver;
import org.springframework.security.oauth2.core.endpoint.OAuth2AuthorizationRequest;
import java.util.HashMap;
import java.util.Map;

@Configuration
public class CustomAuthorizationRequestConfig {

    @Bean
    public OAuth2AuthorizationRequestResolver customAuthorizationRequestResolver(ClientRegistrationRepository repo) {
        DefaultOAuth2AuthorizationRequestResolver resolver = new DefaultOAuth2AuthorizationRequestResolver(repo, "/oauth2/authorization");
        
        resolver.setAuthorizationRequestCustomizer(request -> {
            // 添加自定义参数
            Map<String, Object> extraParams = new HashMap<>();
            extraParams.put("custom_param", "fixed-value");
            request.additionalParameters(extraParams);
            // 也可以直接拼接修改授权URI
            request.authorizationUri(request.authorizationUri() + "?extra=dynamic-param");
        });
        
        return resolver;
    }
}

内容的提问来源于stack exchange，提问作者hillel_guy