SpringOAuth2再深入

roleCodes.stream().map(SimpleGrantedAuthority::new).collect(Collectors.toList());

@Override
public Collection<? extends GrantedAuthority> getAuthorities() {
    return roleCodes.stream().map(SimpleGrantedAuthority::new).collect(Collectors.toList());
}

roleStr->new SimpleGrantedAuthority(roleStr)

http.authorizeExchange()
                .pathMatchers(ArrayUtil.toArray(ignoreUrlsConfig.getUrls(),String.class)).permitAll()//白名单配置
                .anyExchange().access(authorizationManager)//鉴权管理器配置
                .and().exceptionHandling()
                .accessDeniedHandler(restfulAccessDeniedHandler)//处理未授权
                .authenticationEntryPoint(restAuthenticationEntryPoint)//处理未认证
                .and().csrf().disable();

@Bean
public SecurityWebFilterChain springSecurityFilterChain(ServerHttpSecurity http) {
    http.oauth2ResourceServer().jwt().jwtAuthenticationConverter(jwtAuthenticationConverter());
    
    //自定义处理JWT请求头过期或签名错误的结果（新添加的）
    http.oauth2ResourceServer().authenticationEntryPoint(restAuthenticationEntryPoint);

    http.authorizeExchange()
            .pathMatchers(ArrayUtil.toArray(ignoreUrlsConfig.getUrls(),String.class)).permitAll()//白名单配置
            .anyExchange().access(authorizationManager)//鉴权管理器配置
            .and().exceptionHandling()
            .accessDeniedHandler(restfulAccessDeniedHandler)//处理未授权
            .authenticationEntryPoint(restAuthenticationEntryPoint)//处理未认证
            .and().csrf().disable();
    return http.build();
}