oauth2资源开发规范

## oauth2资源开发规范
可以参考eap-ec服务，步骤如下：
1. pom.xml

```xml
 <parent>
         <groupId>com.zhc.eap</groupId>
         <artifactId>eap-parent</artifactId>
         <version>5.0.0-SNAPSHOT</version>
         <relativePath/>
 </parent>
 ****
 </dependencies>
         *****
         <dependency>
             <groupId>com.zhc.eap</groupId>
             <artifactId>eap-micro</artifactId>
             <version>5.0.0-SNAPSHOT</version>
         </dependency>
 </dependencies>
```
2. application.yml添加如下配置：

```yaml
  ****
security:
    oauth2:
        resource:
          prefer-token-info: true
          token-info-uri: http://网关域名或地址:网关端口/oauth/check_token
        client:
          client-id: oauth2
          client-secret: oauth2
```

1. WebSecurityConfigurerAdapter控制接口权限

3. 继承BaseResourceServerConfig实现接口是否需要带token

```javascript
@Configuration
@EnableResourceServer
public class OauthResourceServerConfig extends BaseResourceServerConfig {
    @Override
    public void configure(HttpSecurity http) throws Exception {
        http.csrf().disable().exceptionHandling()
                .authenticationEntryPoint(
                        (request, response, authException) -> response.sendError(HttpServletResponse.SC_UNAUTHORIZED))
                .and().requestMatchers().antMatchers("/ec/**")
                .and().authorizeRequests()
                .antMatchers("/ec/**").authenticated().and().httpBasic();
    }
}
```