Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add AutoConfiguration support for spring-security-oauth2-resource-server #13787

Closed
jzheaux opened this issue Jul 16, 2018 · 1 comment

Comments

@jzheaux
Copy link
Contributor

commented Jul 16, 2018

Spring Boot should add auto configuration support for spring-security-oauth2-resource-server. This will allow simplifying how an OAuth 2.0 Resource Server is configured.

For example, a user could configure a resource server in the following way:

spring:
  security:
    oauth2:
      resource-server:
        jwt:
          jwk-set-uri: https://example.org/.well-known/jwks.json

Then, if spring-security-oauth2-resource-server is present on the classpath, as attested by the presence of org.springframework.security.oauth2.server.resource.authentication.JwtAuthenticationToken, Spring Boot's auto configuration support could configure a resource server in the following way:

http
    .authorizeRequests()
        .anyRequest().authenticated()
        .and()
    .oauth2()
        .resourceServer()
            .jwt();

And then could expose an instance of org.springframework.security.oauth2.jwt.NimbusJwtDecoderJwkSupport(jwkSetUri).

@jzheaux

This comment has been minimized.

Copy link
Contributor Author

commented Jul 16, 2018

fyi, @rwinch

@jzheaux jzheaux changed the title Add AutoConfiguration support for `spring-security-oauth2-resource-server` Add AutoConfiguration support for spring-security-oauth2-resource-server Jul 16, 2018
@mbhave mbhave added this to the Backlog milestone Jul 16, 2018
@mbhave mbhave self-assigned this Aug 6, 2018
@mbhave mbhave modified the milestones: Backlog, 2.1.0.M2 Aug 6, 2018
@mbhave mbhave closed this in d6b6a5f Aug 6, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
3 participants
You can’t perform that action at this time.