Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

JwtDecoderProviderConfigurationUtils not using RestTemplate bean #8883

Closed
qcastel opened this issue Jul 28, 2020 · 1 comment
Closed

JwtDecoderProviderConfigurationUtils not using RestTemplate bean #8883

qcastel opened this issue Jul 28, 2020 · 1 comment
Assignees
Labels
in: oauth2 An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose) status: duplicate A duplicate of another issue

Comments

@qcastel
Copy link

qcastel commented Jul 28, 2020

Describe the bug

The class JwtDecoderProviderConfigurationUtils is instanciating the RestTemplate instead of using the bean, making impossible to customise the SSL context.

https://github.com/spring-projects/spring-security/blob/master/oauth2/oauth2-jose/src/main/java/org/springframework/security/oauth2/jwt/JwtDecoderProviderConfigurationUtils.java#L42

To Reproduce

Try to setup a sample project as an OAuth2 resource server pointing to an AS exposed with a self signed certificate for example. This would throw a SSLHandshakeException.

Expected behavior

Use the bean.

@qcastel qcastel added status: waiting-for-triage An issue we've not yet triaged type: bug A general bug labels Jul 28, 2020
@jgrandja
Copy link
Contributor

Closing as duplicate of #8882. Please see JwtDecoders and provide any additional feedback there.

@jgrandja jgrandja added in: oauth2 An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose) status: duplicate A duplicate of another issue and removed status: waiting-for-triage An issue we've not yet triaged type: bug A general bug labels Jul 28, 2020
@jgrandja jgrandja self-assigned this Jul 28, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
in: oauth2 An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose) status: duplicate A duplicate of another issue
Projects
None yet
Development

No branches or pull requests

2 participants