Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

How to use introspection-uri in the sample authorization server? #1

Open
rrigoni opened this issue Apr 20, 2020 · 2 comments
Open

How to use introspection-uri in the sample authorization server? #1

rrigoni opened this issue Apr 20, 2020 · 2 comments

Comments

@rrigoni
Copy link

rrigoni commented Apr 20, 2020

The endpoint /profile/me it is a kind of token introspection, how to get this authorization server working with the introspection-uri in the opaque-token configuration in a resource server as follow?

The exposed endpoints are /oauth/token_key, /oauth/check_token and /oauth/token (to generate the token). Is the introspection endpoint the /oauth/check_token?

security:
  oauth2:
    resourceserver:
      opaque-token:
        introspection-uri: https://idp.example.com/introspect
        client-id: client
        client-secret: secret
@marcosbarbero
Copy link
Owner

Hi @rrigonit this guide is outdated, I'll update it soon and let you know how to tackle it.

@rrigoni
Copy link
Author

rrigoni commented Apr 20, 2020

I think that only will be possible with the new authorization server announced here.
I'm trying to get opaque tokens in the Spring Cloud Gateway authentication. Do not want to use jwt.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants