Make it work OOTB with PWS (in 'cloud' profile)

README.md

@@ -1,3 +1,13 @@
 This project is a sample of a client application with OAuth2 single
 sign on using Spring Cloud (in Java - there is a Groovy sample in the
 "demo" directory at https://github.com/spring-cloud-samples/scripts).
+
+You can run the app locally with the "authserver" app from https://github.com/spring-cloud-samples/ (running on localhost:8080/uaa), or against Github as an auth server by using the "github" profile (run it with `-Dspring.profiles.active=github`).
+
+It should also work out of the box on Cloud Foundry if you create a user provided service called "sso" pointing to the UAA, e.g.
+
+```
+$ cf create-user-provided-service sso -p '{"userInfoUri":"https://uaa.run.pivotal.io/userinfo", "tokenUri":"https://login.run.pivotal.io/oauth/token", "authorizationUri":"https://login.run.pivotal.io/oauth/authorize", "clientId":"[acme]", "clientSecret":"[secret]"}'
+```
+
+where `[client]` and `[secret]` are the credentials of a registered client that is 

src/main/java/demo/SsoApplication.java

@@ -18,6 +18,7 @@
 import org.springframework.cloud.security.oauth2.sso.OAuth2SsoConfigurerAdapter;
 import org.springframework.context.annotation.ComponentScan;
 import org.springframework.context.annotation.Configuration;
+import org.springframework.core.env.StandardEnvironment;
 import org.springframework.security.config.annotation.web.builders.HttpSecurity;
 import org.springframework.security.web.csrf.CsrfFilter;
 import org.springframework.security.web.csrf.CsrfToken;
@@ -48,6 +49,10 @@ public Principal user(Principal user) {
 	}
 
 	public static void main(String[] args) {
+		StandardEnvironment environment = new StandardEnvironment();
+		if (!environment.acceptsProfiles("cloud", "github")) {
+			environment.addActiveProfile("local");
+		}
 		SpringApplication.run(SsoApplication.class, args);
 	}
 

src/main/resources/application.yml

@@ -21,6 +21,11 @@ spring:
     sso:
       loginPath: /dashboard/login
       logoutPath: /dashboard/logout
+
+---
+spring:
+  profiles: local
+  oauth2:
     client:
       accessTokenUri: http://localhost:8080/uaa/oauth/token
       userAuthorizationUri: http://localhost:8080/uaa/oauth/authorize
@@ -35,11 +40,6 @@ spring:
       id: openid
       serviceId: ${PREFIX:}resource
 
----
-spring:
-  profiles: local
-  oauth2:
-
 ---
 spring:
   profiles: github