小编Mih*_*kov的帖子

我正在尝试使用 Spring 授权服务器来授权用户，但 /userinfo 端点有问题，它总是返回 401 未经授权错误。

我的 /userinfo 请求如下所示：

GET /userinfo HTTP/1.1 Host: localhost:8080 Authorization: Bearer eyJraWQiOiIyMTIxNjAzNC1kYTc4LTRlMTQtODI3Ni1lNzlmM2NlZDM3NzYiLCJhbGciOiJSUzI1NiJ9.eyJzdWIiOiJhZG1pbiIsImF1ZCI6ImN5cHJlc3MtY2xpZW50LWlkIiwibmJmIjoxNjQ2MzI2Mzc2LCJzY29wZSI6WyJvcGVuaWQiXSwiaXNzIjoiaHR0cDpcL1wvbG9jYWxob3N0OjgwODAiLCJleHAiOjE2NDYzMjgxNzYsImlhdCI6MTY0NjMyNjM3Nn0.aJsCVLoszgi2uCq6Jd9ov83QZFsqN1HK7-sE7Lbs11APRP1cHRYV2hlnrt7i7znMMquWsIfutiVlwOlPzX-lDJpNgthHkqVlIplrIFQdvCT6FTXO7V8dnyyHFhPbnPdYtWHnFoES3gpEazKD8IHnxuvYz75D98EcU9pOFH7zwqxh7t3uhvDXzijjdM59C_94zng2ufCCRmWf0NZd9uj1M9Y8iz1SI_fNjBbkwhe8ZecN6GGX9BPkuaWc_WB4OP8nANIkGgEpf-NlEoitrRPBDVwB-yAXKr8DV6c6Nb-AnGj-ogyjmdLBRE0tFG2mH6mHyplJYnQPzJjfOx_mqV9U0A

我的Spring授权服务器配置：

@EnableWebSecurity
public class SpringSecurityConfiguration {
    @Bean
    public UserDetailsService users() {
    // @formatter:off
    UserDetails user = User.withUsername("admin").password("password").roles("ADMIN").build();
return new InMemoryUserDetailsManager(user);
    }

    @Bean
    SecurityFilterChain defaultSecurityFilterChain(HttpSecurity http) throws Exception {
    // defining security for other endpoints of your application including the

    // @formatter:off
        http.authorizeRequests(authorizeRequest -> authorizeRequest.anyRequest().authenticated())
        .formLogin(Customizer.withDefaults());
    // @formatter:on

    return http.build();
    }

}

@Configuration
public class AuthorizationServerConfiguration {
    @Bean
    public OAuth2AuthorizationConsentService …