public AuthToken applyToken(String username, String password, String clientId, String clientSecret) {

        StringBuffer stringBuffer=new StringBuffer();

        stringBuffer.append("grant_type=password&scope=read write");

        stringBuffer.append("&client_id=" + clientId);

        stringBuffer.append("&client_secret="+clientSecret);

        stringBuffer.append("&username=" + username);

        stringBuffer.append("&password=" + password);

        //申请令牌的url

        String authUrl = httpUrl + "/oauth/token?" + stringBuffer.toString();

        //        authUrl = authUrl.replaceAll(" ","%20");  //实践不需要替换空格，restTemplate能识别

        log.info("-----------------authUrl:" + authUrl);

        //定义header

        LinkedMultiValueMap<String, String> header = new LinkedMultiValueMap<>();

        String httpBasic = getHttpBasic(clientId, clientSecret);

        header.add("Authorization",httpBasic);

        //定义body，用body会报错

        LinkedMultiValueMap<String, String> body = new LinkedMultiValueMap<>();

//        body.add("grant_type","password");

//        body.add("username",username);

//        body.add("password",password);

        HttpEntity<MultiValueMap<String, String>> httpEntity = new HttpEntity<>(body, header);

        //String url, HttpMethod method, @Nullable HttpEntity<?> requestEntity, Class<T> responseType, Object... uriVariables

        //设置restTemplate远程调用时候，对400和401不让报错，正确返回数据

        restTemplate.setErrorHandler(new DefaultResponseErrorHandler(){

            @Override

            public void handleError(ClientHttpResponse response) throws IOException {

                if(response.getRawStatusCode()!=400 && response.getRawStatusCode()!=401){

                    super.handleError(response);

                }

            }

        });

        ResponseEntity<Map> exchange = restTemplate.exchange(authUrl, HttpMethod.POST, httpEntity, Map.class);

        //申请令牌信息

        Map bodyMap = exchange.getBody();

        if (bodyMap == null ||

                bodyMap.get("access_token") == null ||

                bodyMap.get("refresh_token") == null ||

                bodyMap.get("jti") == null) {

            //解析spring security返回的错误信息

            if (bodyMap != null && bodyMap.get("error_description") != null) {

                String error_description = (String) bodyMap.get("error_description");

                if (error_description.indexOf("UserDetailsService returned null") >= 0) {

//                    ExceptionCast.cast(AuthCode.AUTH_ACCOUNT_NOTEXISTS);

                } else if (error_description.indexOf("坏的凭证") >= 0) {

//                    ExceptionCast.cast(AuthCode.AUTH_CREDENTIAL_ERROR);

                }

            }

            return null;

        }

       AuthToken authToken = new AuthToken();

        authToken.setAccess_token((String) bodyMap.get("jti"));//用户身份令牌

        authToken.setRefresh_token((String) bodyMap.get("refresh_token"));//刷新令牌

        authToken.setJwt_token((String) bodyMap.get("access_token"));//jwt令牌

        return authToken;

    }

    //获取httpbasic的串

    private String getHttpBasic(String clientId, String clientSecret) {

        String string = clientId + ":" + clientSecret;

        //将串进行base64编码

        byte[] encode = Base64Utils.encode(string.getBytes());

        return "Basic " + new String(encode);

    }