Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Opaque Token Intermediate Type #6632

Closed
jzheaux opened this issue Mar 20, 2019 · 0 comments · Fixed by #6633
Closed

Opaque Token Intermediate Type #6632

jzheaux opened this issue Mar 20, 2019 · 0 comments · Fixed by #6633
Assignees
Labels
in: oauth2 An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose) type: enhancement A general enhancement
Milestone

Comments

@jzheaux
Copy link
Contributor

jzheaux commented Mar 20, 2019

One clear benefit of JwtDecoder is it acts as an intermediate type for the purposes of configuration. It makes auto-configuration with Spring Boot very clean, and presents opportunities where the user can easily customize Bearer Token authentication strategy without needing to wire up a custom authentication provider.

It would be nice if the opaque token support had the same flexibility.

@jzheaux jzheaux added New Feature in: oauth2 An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose) labels Mar 20, 2019
@jzheaux jzheaux added this to the 5.2.0.M2 milestone Mar 20, 2019
@jgrandja jgrandja modified the milestones: 5.2.0.M2, 5.2.0.RC1 Apr 15, 2019
jzheaux added a commit to jzheaux/spring-security that referenced this issue Apr 29, 2019
Introducing OAuth2TokenIntrospectionClient and also
ReactiveOAuth2TokenIntrospectionClient as configuration points.

The DSL looks in the application context for these types in the same
way it looks for JwtDecoder and ReactiveJwtDecoder, and exposes
similar configuration methods.

Fixes: spring-projectsgh-6632
jzheaux added a commit that referenced this issue Apr 29, 2019
Introducing OAuth2TokenIntrospectionClient and also
ReactiveOAuth2TokenIntrospectionClient as configuration points.

The DSL looks in the application context for these types in the same
way it looks for JwtDecoder and ReactiveJwtDecoder, and exposes
similar configuration methods.

Fixes: gh-6632
@rwinch rwinch added the type: enhancement A general enhancement label May 3, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
in: oauth2 An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose) type: enhancement A general enhancement
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants