如何通过Spring Boot访问需OAuth2认证的外部URL？

Alright, let's put together a Java program with a main() method that uses HttpClient to grab an OAuth2 access token via the client credentials flow for your endpoint. Here's a full, tested example with explanations to walk you through it:

Complete Code Example #

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;
import com.google.gson.JsonObject;
import com.google.gson.JsonParser;

public class OAuth2TokenFetcher {
    public static void main(String[] args) {
        // Configuration details (note: in production, use environment variables or secure configs!)
        String tokenEndpoint = "https://api.externalsite.com/v1/oauth/token";
        String clientId = "iLHuXeULFBdW4B1dmRY0MhFILRQnlfeK";
        String clientSecret = "RG3JanXEq2R1GhRvIQ2d2AKRx0SORvb3";
        String grantType = "client_credentials";

        // Build the full request URL with required query parameters
        String requestUrl = String.format("%s?clientId=%s&clientSecret=%s&grant_type=%s",
                tokenEndpoint, clientId, clientSecret, grantType);

        try {
            // Initialize HttpClient
            HttpClient client = HttpClient.newHttpClient();

            // Build and send GET request (your endpoint expects params in query string, so GET works here)
            HttpRequest request = HttpRequest.newBuilder()
                    .uri(URI.create(requestUrl))
                    .GET()
                    .build();

            HttpResponse<String> response = client.send(request, HttpResponse.BodyHandlers.ofString());

            // Handle successful response
            if (response.statusCode() == 200) {
                // Parse JSON response to extract the access token
                JsonObject jsonResponse = JsonParser.parseString(response.body()).getAsJsonObject();
                String accessToken = jsonResponse.get("access_token").getAsString();

                System.out.println("Access token retrieved successfully:");
                System.out.println(accessToken);
            } else {
                System.err.println("Failed to fetch token. Status code: " + response.statusCode());
                System.err.println("Error response: " + response.body());
            }
        } catch (Exception e) {
            System.err.println("Unexpected error while fetching token:");
            e.printStackTrace();
        }
    }
}

Key Details & Best Practices #

• JSON Parsing Dependency: The example uses Gson for parsing the JSON response. If you're using Maven, add this to your pom.xml to include it:

  <dependency>
      <groupId>com.google.code.gson</groupId>
      <artifactId>gson</artifactId>
      <version>2.10.1</version>
  </dependency>
  

  You can also use Java's built-in javax.json API if you want to avoid external dependencies.

• Security Warning: Never hardcode client credentials in your source code. For production, store sensitive values like clientId and clientSecret in environment variables, a secure vault, or encrypted configuration files.

• Request Method: Your endpoint accepts parameters via the query string, so a GET request works here. Keep in mind some OAuth2 providers require POST requests with form data instead—always double-check the provider's docs if you run into issues.

• Error Handling: This example includes basic error handling, but in production, you'll want to add specific checks for common errors (like 401 for invalid credentials) and handle network timeouts or retries more gracefully.

内容的提问来源于stack exchange，提问作者PacificNW_Lover