Skip to content

OAuth2AuthorizationEndpointFilter should be applied after AuthorizationFilter #18251

@jgrandja

Description

@jgrandja

OAuth2AuthorizationEndpointFilter should be applied after AuthorizationFilter in order for Multi-Factor Authentication to take effect (if configured).

Currently, MFA is not applied correctly for Authorization Server. Moving OAuth2AuthorizationEndpointFilter after AuthorizationFilter will resolve this issue.

Metadata

Metadata

Assignees

Labels

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)type: bugA general bug

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions