spring-security-oauth2

spring security 5.1 oauth 2, how to add additional parameters to user authentication uri

柔情痞子 提交于 2020-08-23 07:07:44
问题 I'm trying to integrate external oauth 2 authentication server and resource server. Their configuration requires some additional custom parameters: state - should be uuid, TimeStamp, accessType, also clientSecret should be signed using a combination of all previous params as data. We are using Spring boot, spring security 5.1, Camunda. The catch is I can't directly add params to URI calling method setUserAuthorizationUri cause this method is called only once during initialization 回答1: The

How do I use multiple 'JWK Set Uri' values in the same Spring Boot app?

大城市里の小女人 提交于 2020-08-17 03:53:12
问题 I have a requirement to use two different authorization servers (two Okta instances) to validate authentication tokens coming from two different web applications inside a single Spring Boot application which is a back-end REST API layer. Currently I have one resource server working with the following configuration: @Configuration @EnableWebSecurity public class ResourceServerSecurityConfig extends WebSecurityConfigurerAdapter { @Override protected void configure(HttpSecurity http) throws