How to consume basic-authentication protected Restful web service via feign client - spring-security

Question

Thank you for your time.
To make it simple, I created a example service like below:
#RestController
#RequestMapping("/")
public class ComputeController {
#GetMapping("/add")
public int add(#RequestParam("left") int left, #RequestParam("right") int right) {
return left + right;
}
}
To protected this url, I config spring-security like this:
management.security.enabled=true
security.user.name=admin
security.user.password=admin
When I startup this service and access like this:
GET /add?left=100&right=11 HTTP/1.1
Authorization: ***** Hidden credentials *****
Host: localhost:7777
Connection: close
Everythis is going fine.
In other node, I created a "service-comsumer" by netflix feign. It's a Java Interface.
#FeignClient(name = "API-GATEWAY", path = "/compute-service", fallback = ComputeServiceCircuitBreaker.class)
public interface ComputeServiceClient {
#RequestMapping(path = "/add", method = RequestMethod.GET)
public Integer add(#RequestParam("left") Integer left, #RequestParam("right") Integer right);
}
But I DO NOT know how to config the request header "Authorization".
Any idea? Thanks again.

Answer 1

You need to create a FeignClient Configuration class, for example
import feign.auth.BasicAuthRequestInterceptor;
#Configuration
public class FeignClientConfiguration {
#Bean
public BasicAuthRequestInterceptor basicAuthRequestInterceptor() {
return new BasicAuthRequestInterceptor("admin", "admin");
}
}
then in your #FeignClient annotation use this configuration file:
#FeignClient(name="service", configuration = FeignClientConfiguration.class)

Answer 2

As of october 2020, this works:
public class FeignClientConfiguration {
#Bean
public BasicAuthRequestInterceptor basicAuthRequestInterceptor() {
return new BasicAuthRequestInterceptor("asdf", "asdf");
}
}
#FeignClient(name = "thirdPartyClient", url = "ceva.com",
configuration = FeignClientConfiguration.class)
public interface ThirdPartyClient {
#GetMapping
Response get();
}
Note, we don't annotate the configuration with #Configuration in order to not apply it to all requests.