Oauth2 Authorization Server

使用 Spring Boot 4 和 Java 26 构建 OAuth2 授权服务器

前提条件

• 应安装 Java 26 --> export JAVA_HOME=$(/usr/libexec/java_home -v 26)
• 应安装 Maven
• 应安装 Docker
• 可以安装 Postman

如何运行和测试

• 运行以下命令，为 AI 模型 API 密钥设置环境变量

  •   export OPENAI_API_KEY=your_api_key_here
      export DEEPSEEK_API_KEY=your_api_key_here
      export ANTHROPIC_API_KEY=your_api_key_here      # Optional
      export GOOGLE_GENAI_API_KEY=your_api_key_here   # Optional
    

•   cd oauth2-authorization-server
    
    # Run tests on the host (requires Docker for Testcontainers)
    mvn clean verify
    
    # Build and start the application together with all infrastructure services
    docker compose --profile start_application up -d --build
    
    # Start only infrastructure services (Redis, MariaDB, LDAP, Ollama, etc.)
    docker compose up -d
    
    # For local development without Docker (requires infrastructure services running via docker compose up -d)
    ./mvnw spring-boot:run   # or: mvn spring-boot:run
  

• Import the followings to test in Postman

  • OAuth2 Authorization Server.postman_collection.json
  • OAuth2 Authorization Server.postman_environment.json

• Swagger: http://localhost:9000/swagger-ui/index.html

  • Click Authorize and enter the following credentials
  • client_id: client
  • client_secret: secret
  • Use one of the following default values to log in http://localhost:9000/login
    • username: Developer password: password
    • username: Admin password: password
    • username: User password: password

• Actuator: http://localhost:9000/actuator/

• Database credentials

  • url: jdbc:mariadb://localhost:3306/oauth2_authorization_server
  • username: mb_test
  • password: test

• Redis

  • host: localhost
  • port: 6379

• Redis Insight: http://localhost:5540/

  • Click Add Redis database
  • Connection URL --> redis://[email protected]:6379
  • Click Add Database
  • 

• Ollama

  • http://localhost:3000/ sign up for an account for local environment
  • Search for mxbai-embed-large and download it if it does not exist
  • Search for mistral and download it if it does not exist
  • Search for deepseek-r1:7b and download it if it does not exist

• Grafana UI

  • http://localhost:3001/
  • username: admin
  • password: admin

Debugging Spring Boot Tests in IntelliJ IDEA

1. Run one of the below commands in the terminal
   • mvn test -Dmaven.surefire.debug
   • If port 5005 is already in use, you can specify a custom port
     • mvn test -Dmaven.surefire.debug="-Xdebug -Xrunjdwp:transport=dt_socket,server=y,suspend=y,address=8000"
2. Open IntelliJ IDEA
3. Go to Run > Attach to Process (or use shortcut)
   • Windows/Linux: Ctrl + Alt + 5
   • Mac: Cmd + Alt + 5
4. Select the Java process running your tests
5. The test will pause until you connect your debugger. Once connected, you can use breakpoints and step through your code.

How to Run and Test with CDC (Class Data Sharing)

• Java 26+ should be installed
• Run ./mvnw clean install or./mvnw clean install -Paot or ./mvnw -Paot package command to build the application with AOT
• Run docker-compose up -d command to run necessary services
• Run docker build -t oauth2-authorization-server -f DockerfileForAOTCache . command to build the image
• Run docker run -d --restart=always -p 9000:9000 oauth2-authorization-server:latest command to run the image

How to Run and Test Native Image with GraalVM

• Java 26 GraalVM edition should be installed
• Run docker-compose up -d command to run necessary services
• Run ./mvnw -Pnative native:compile or ./mvnw -Pnative native:compile -DskipTests command to build the native image
• Run ./target/oauth2-authorization-server command to run the native image
• Install Grype (OPTIONAL)
  • Run native-image-inspect ./target/oauth2-authorization-server-0.0.1 | grype -v command to scan vulnerabilities
• Run native-image-inspect ./target/oauth2-authorization-server-0.0.1 >output.json command and open output.json or visit http://localhost:9000/actuator/sbom/native-image to inspect all libraries, methods etc. used in the native image
• Run open ./target/oauth2-authorization-server-build-report.html to see build report
• Use Swagger UI to test the application

Spring Boot with CRaC (Coordinated Restore at Checkpoint) by Creating Ready to Restore Container Image.

• Warning: for real projects make sure to not leak sensitive data in CRaC files since they contain a snapshot of the memory of the running JVM instance.
• Checkpoint
  • Run on demand checkpoint/restore of a running application with: ./docs/scripts/checkpoint.sh
  • Run an automatic checkpoint/restore at startup with: ./docs/scripts/checkpointOnRefresh.sh
• Restore
  • Restore the application with: ./docs/scripts/restore.sh
• Use Swagger UI to test the application

Docker Compose image versions

• Check pinned image tags in docker-compose.yml:
  • Linux / macOS / Git Bash: ./docs/scripts/check-compose-image-updates.sh
  • Windows: .\docs\scripts\check-compose-image-updates.cmd
  • Preview upgrades: ./docs/scripts/check-compose-image-updates.sh --dry-run
  • Apply OUTDATED bumps: ./docs/scripts/check-compose-image-updates.sh --apply
• CI runs the read-only check on every pipeline; automated Maven + Compose upgrades run via .github/workflows/dependency-update.yml.

How to Run and Test AI Models Locally with Docker Desktop Model Runner

• Requires: Docker Desktop 4.40 and later
• Run docker-compose up -d command to run necessary services
• Run docker model pull ai/gemma3:4B-Q4_K_M command to pull the model
  • Run docker model run ai/gemma3:4B-Q4_K_M command to run the model to test it from the command line (OPTIONAL)
• Docker Desktop --> Settings --> Features in development --> Beta features --> Enable Docker Model Runner --> Enable host-side TCP support --> Apply & Restart
  • 
• Run mvn test or mvn clean install or mvn clean package or ./mvnw clean install command to run all the tests
• Run mvn spring-boot:run command to run the application
• Use Swagger UI to test the application

Dependency Version Management

Dependency versions are managed via the Maven Versions Plugin and a version-rules.xml filter that excludes alpha/beta/RC/SNAPSHOT releases.

Local — using the helper script:

./docs/scripts/update-versions.sh check           # Show all outdated versions (parent + props + deps + plugins)
./docs/scripts/update-versions.sh update          # Auto-update everything and review with: git diff pom.xml
./docs/scripts/update-versions.sh update-props    # Update only <properties> versions (safest)
./docs/scripts/update-versions.sh update-parent   # Update only spring-boot-starter-parent
./docs/scripts/update-versions.sh revert          # Revert pom.xml from backup

CI/CD — 自动创建 PR：

MB 依赖版本更新工作流每周一运行（也可按需运行）， 检查更新、验证构建是否成功编译，并自动创建 PR。

参考资料

• Spring Boot 3 教程：使用 Spring Authorization Server 实现 Security OAuth2，并将登录数据保存到数据库
• Spring Boot LDAP 身份验证入门：使用 Spring Security 和 LDAP Server
• BCryptPasswordEncoderTests
• 使用 Spring Boot 3、Java 21 和 CDS 构建高效容器（SpringOne 2024）
  • https://medium.com/ekino-france/a-comprehensive-guide-to-using-class-data-sharing-cds-with-spring-boot-1ee8e6e9b2a6
  • https://bell-sw.com/blog/how-to-use-cds-with-spring-boot-applications/
  • 
• Spring Boot AOT + GraalVM Native Images 入门
  • 
  • 在 IntelliJ IDEA 中掌握 Spring Data AOT
• 欢迎使用 GraalVM for JDK 24！🚀
• 容器映像和文件系统漏洞扫描器 Grype
• Project CRaC 简介：提升 Java 和 Spring 开发中的运行时效率
• 模型上下文协议（MCP）
  • MCP Server Boot Starter
  • 模型上下文协议（MCP）详解：如何让 AI 访问文件、进行网络搜索等
  • 
• 使用 Docker Compose 安装 Ollama
  • Ollama Chat
• Spring AI Advisors 指南
• 使用 Spring AI Evaluators 测试大模型响应
• 向量数据库
• Java + RAG：使用 Spring AI 打造 AI 金融顾问💡
  • 检索增强生成（RAG）
  • 
• 在本地运行 AI 模型：使用 Docker Desktop Model Runner，无需 API 密钥，也无需付费
  • Docker Model Runner
• Spring AI 2.0 M1 与 Spring Boot 4 集成
• AppMap for Java 安装与使用分步指南
  • AppMap Maven 插件
  • AppMap：免费的 AI Architect IntelliJ 插件