Spring Security OAuth2 实现登录互踢的示例代码

@Transactional
  public OAuth2AccessToken createAccessToken(OAuth2Authentication authentication) throws AuthenticationException {

    OAuth2AccessToken existingAccessToken = tokenStore.getAccessToken(authentication);
    OAuth2RefreshToken refreshToken = null;
    // 重写此处，当用户关联的token 存在时，删除原有令牌
    if (existingAccessToken != null) {
      tokenStore.removeAccessToken(existingAccessToken);
    }
    else if (refreshToken instanceof ExpiringOAuth2RefreshToken) {
      ExpiringOAuth2RefreshToken expiring = (ExpiringOAuth2RefreshToken) refreshToken;
      if (System.currentTimeMillis() > expiring.getExpiration().getTime()) {
        refreshToken = createRefreshToken(authentication);
      }
    }

    OAuth2AccessToken accessToken = createAccessToken(authentication, refreshToken);
    tokenStore.storeAccessToken(accessToken, authentication);
    // In case it was modified
    refreshToken = accessToken.getRefreshToken();
    if (refreshToken != null) {
      tokenStore.storeRefreshToken(refreshToken, authentication);
    }
    return accessToken;
  }

public OAuth2AccessToken getAccessToken(OAuth2Authentication authentication) {
    String key = authenticationKeyGenerator.extractKey(authentication);
     // redis 查询逻辑，根据 key
    return accessToken;
  
}

public String extractKey(OAuth2Authentication authentication) {
  Map<String, String> values = new LinkedHashMap<String, String>();
  OAuth2Request authorizationRequest = authentication.getOAuth2Request();
  if (!authentication.isClientOnly()) {
    values.put(USERNAME, authentication.getName());
  }
  values.put(CLIENT_ID, authorizationRequest.getClientId());
  if (authorizationRequest.getScope() != null) {
    values.put(SCOPE, OAuth2Utils.formatParameterList(new TreeSet<String>(authorizationRequest.getScope())));
  }
  return generateKey(values);
}

public String extractKey(OAuth2Authentication authentication) {
  Map<String, String> values = new LinkedHashMap<String, String>();
  OAuth2Request authorizationRequest = authentication.getOAuth2Request();
  if (!authentication.isClientOnly()) {
    values.put(USERNAME, authentication.getName());
  }
  if (authorizationRequest.getScope() != null) {
    values.put(SCOPE, OAuth2Utils.formatParameterList(new TreeSet<String>(authorizationRequest.getScope())));
  }
  return generateKey(values);
}