spring cloud gateway with sso - spring-boot

Question

I have an old application with springboot 2.1.3 where zuul proxy is used as API gateway. With Zuul|SSO|Feign is also implemented. Due to recent vulnerabilites, we are migrating to springboot 2.6.8 where we need to migrate zuul to spring cloud gateway along with cors, sso and Feign. I have implemented spring cloud gateway but not able to understand about sso and feign. Below giving some reference with existing code and new as well.
#EnableFeignClients
#EnableDiscoveryClient
#EnableZuulProxy
#EnableOAuth2Sso
#SpringBootApplication(exclude = { MongoAutoConfiguration.class, MongoDataAutoConfiguration.class,
MongoReactiveAutoConfiguration.class, DataSourceAutoConfiguration.class,
DataSourceTransactionManagerAutoConfiguration.class, HibernateJpaAutoConfiguration.class })
public class SampleApplication {
private Logger logger = LoggerFactory.getLogger(SampleApplication.class);
#Value("${spring.cloud.consul.discovery.instanceId}")
private String instanceId;
#Value("${spring.cloud.consul.host}")
private String host;
#Value("${spring.cloud.consul.port}")
private String port;
public static void main(String[] args) {
new SpringApplicationBuilder(SampleApplication.class).web(WebApplicationType.SERVLET).run(args);
}
#Bean
public RequestInterceptor getUserFeignClientInterceptor() {
return new UserFeignClientInterceptor();
}
#Bean
public FilterRegistrationBean<CorsFilter> simpleCorsFilter() {
logger.debug("simpleCorsFilter called");
UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource();
CorsConfiguration config = new CorsConfiguration();
config.setAllowCredentials(true);
config.addAllowedOrigin("*");
config.addAllowedHeader("*");
config.addAllowedMethod("*");
source.registerCorsConfiguration("/**", config);
FilterRegistrationBean<CorsFilter> bean = new FilterRegistrationBean<>(new CorsFilter(source));
bean.setOrder(Ordered.HIGHEST_PRECEDENCE);
return bean;
}
#PreDestroy
public void shutdown() {
logger.info("service {} is shutting down", instanceId);
RestTemplate restTemplate = new RestTemplate();
String url = String.format("http://%s:%d/agent/service/deregister/%s", host, port, instanceId);
try {
restTemplate.put(url, null);
} catch (Exception e) {
logger.error("{}", e);
}
}
}
SpringSecurity Conffiguration
#Configuration
#Order(Ordered.HIGHEST_PRECEDENCE)
public class SpringSecurityConfig extends WebSecurityConfigurerAdapter {
#Override
public void configure(WebSecurity web) throws Exception {
//web.ignoring().antMatchers(HttpMethod.OPTIONS).antMatchers("/actuator/**");
web.ignoring().antMatchers(HttpMethod.OPTIONS).antMatchers("/**");
}
#Override
public void configure(HttpSecurity http) throws Exception {
http.cors().and()
.requestMatcher(new RequestHeaderRequestMatcher("Authorization")).authorizeRequests().antMatchers("/**")
.authenticated().and().csrf().disable();
}
FiegnInterceptor
public class UserFeignClientInterceptor implements RequestInterceptor {
private static final String AUTHORIZATION_HEADER = "Authorization";
private static final String BEARER_TOKEN_TYPE = "Bearer";
#Override
public void apply(RequestTemplate template) {
SecurityContext securityContext = SecurityContextHolder.getContext();
Authentication authentication = securityContext.getAuthentication();
if (authentication != null && authentication.getDetails() instanceof OAuth2AuthenticationDetails) {
OAuth2AuthenticationDetails details = (OAuth2AuthenticationDetails) authentication.getDetails();
template.header(AUTHORIZATION_HEADER, String.format("%s %s", BEARER_TOKEN_TYPE, details.getTokenValue()));
}
}
}
SpringCloudGateway - New imeplementation where defined all the routes and global cors but not sure how to use sso and openfeign.
spring:
application:
name: SampleApplicationNew
cloud:
gateway:
discovery:
locator:
enabled: true
routes:
- id: Microservice1
uri: lb://Microservice1
predicates:
- Path=/microservice1/**/
globalcors:
corsConfigurations:
'[/**]':
allowedOrigins: "*"
allowedHeaders:
- "*"
allowedMethods:
- GET
- POST