-
Notifications
You must be signed in to change notification settings - Fork 1.4k
Add client secret POST authentication method support #140
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
jgrandja
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks for the PR @anoopgarlapati. I left a couple of minor comments.
Also, I'm going to move this to the 0.1.0 release as the changes to the constructor in OAuth2ClientAuthenticationToken is a breaking change for a patch release. The 0.1.0 release allows major changes. Also, I'm pretty sure there will be more major API changes when you start working on Jwt auth.
...ork/security/oauth2/server/authorization/authentication/OAuth2ClientAuthenticationToken.java
Outdated
Show resolved
Hide resolved
.../security/oauth2/server/authorization/authentication/OAuth2ClientAuthenticationProvider.java
Outdated
Show resolved
Hide resolved
...ork/security/oauth2/server/authorization/authentication/OAuth2ClientAuthenticationToken.java
Outdated
Show resolved
Hide resolved
...mework/security/oauth2/server/authorization/web/ClientSecretPostAuthenticationConverter.java
Outdated
Show resolved
Hide resolved
...n/java/org/springframework/security/oauth2/server/authorization/web/OAuth2EndpointUtils.java
Outdated
Show resolved
Hide resolved
a2bef8d to
69e56c4
Compare
Added support for client secret POST authentication method. Added validation of client authentication method when authenticating a client. Closes spring-projectsgh-134
69e56c4 to
e1f491b
Compare
|
@jgrandja I have rebased this branch against master and resolved the merge conflicts. |
|
Thanks for all the updates @anoopgarlapati. This is now in master! |
Added support for client secret POST authentication method.
Added validation of client authentication method when
authenticating a client.
Closes gh-134