Spring OAuth redirect_uri not using https

前端 未结 6 2018
爱一瞬间的悲伤
爱一瞬间的悲伤 2020-12-05 14:05

I have a Spring Boot 1.3.0 application with Spring Security OAuth included as a sort of SSO integration.

The problem is that the application is running in a non-SSL

6条回答
  •  误落风尘
    2020-12-05 14:47

    After digging manually through the configuration classes I was able to find and add the following, which did the trick...

    security.oauth2.client.pre-established-redirect-uri=https://[application_host]/login
    security.oauth2.client.registered-redirect-uri=https://[application_host]/login
    security.oauth2.client.use-current-uri=false
    

    I'm not convinced there isn't a better way to solve the problem of forcing a HTTPS redirect URL, but this fix worked for me.

提交回复
热议问题