313 questions
0
votes
1
answer
42
views
Spring Authorization Server OAuth2AuthorizationServerConfigurer.authorizationServer() method not found
I am new to spring security. I have been looking to build an authorization server and I have went through a couple of documentations. I saw that all of them have used something like:
...
0
votes
0
answers
42
views
How to setup Spring Authorization Server, Spring Cloud Gateway MVC and OAuth2 Resource Server?
I am working on an application to better understand the Spring Security and microservcies architecture.
I have setup:
Spring Authorization Server
Spring Cloud Gateway MVC
OAuth2 Resource Server
...
0
votes
0
answers
30
views
Spring authorization server get access token fail
I am running a spring security oauth2 authorization server 1.5.3.
I use postman to get an access token. Following is my request body in post man:
I have double-checked the parameters, they seem OK, ...
- 1
-1
votes
1
answer
106
views
Spring Authorization Server – /login keeps returning 403 instead of showing login page [closed]
I am learning Spring Authorization Server and trying to build a simple OAuth2 Authorization Server without OpenID Connect.
i want to handle the login page myself inside the same Authorization Server ...
- 120
Best practices
0
votes
1
replies
47
views
SpringC loud Gateway and Spring Authorisation Server Common Session storage
I have a Spring Authorisation Server as my OAuth2-OpenID Connect authentication server running with multiple instances on a cluster. It uses Spring Session Redis for managing distributed sessions. ...
0
votes
0
answers
113
views
How to implement non-plain-text password transmission in Spring Authorization Server 1.4.3 (password grant extension)
I’m using Spring Authorization Server 1.4.3 to build an authentication center.
I’ve extended the authorization server to support the password grant type, so clients can obtain access tokens via the /...
- 181
0
votes
1
answer
61
views
how to save the client-id from request cache when a user is redirected to the spring authorization server?
I have implemented or extended on top of Spring Authorization server. I have a authentication controller that accesses the client-id from the RequestCache object.
Now, I have built a sample OAuth app ...
- 1,418
0
votes
0
answers
46
views
Does Spring Authorization supports FAPI 2.0
I'm trying to do a PoC on FAPI 2.0 for which I want to have an authorization server that supports FAPI2.0 along with the control over IDP integration, user database, OIDC provider and onboarding third ...
- 4,038
0
votes
0
answers
81
views
Spring OAuth2 login page doesn’t load correctly when accessed through Gateway
I’m using a Spring OAuth2 Authorization Server with a Gateway in front of it.
When I access the login page directly via http://localhost:9999 (the OAuth2 server port), everything works: the CSS loads ...
0
votes
1
answer
125
views
Spring OAuth2 Authorization Server: IllegalArgumentException when deserializing custom User class after consent approval
I'm trying to set up a Spring Authorization Server for learning purposes. The login and consent screens work, but after I approve the consent screen and submit the /authorize request, I get the ...
- 65
0
votes
1
answer
97
views
Where should roles and missions/ACLs be managed when building an authorization server?
I’m trying to build my own Spring Authorization Server (for learning purposes and possibly to use across multiple projects in the future).
I’m already familiar with Spring Security and resource server ...
- 65
0
votes
0
answers
86
views
Avoid uri='UNKNOWN' for OAuth endpoints in Spring Authorization Server
I'm using Spring Authorization Server together with Spring Boot Actuator and Micrometer Prometheus integration.
For metrics like http_server_requests_seconds_count, I’m seeing many uri="UNKNOWN&...
0
votes
0
answers
96
views
Oauth2 Logout fails when the token is refreshed using the refresh token. message: Logout request failed: [invalid_token] id_token_hint
alright gpt did not help with this one. so my problem is that logout fails when the token has been refreshed using the refresh token. spring auth server says id_token_hint has expired because it's ...
- 2,320
0
votes
0
answers
42
views
Best way to extend RegisteredClient to support a custom field (app_id) in dynamic client registration?
I'm using Spring Authorization Server with JDBC and dynamic client registration.
I want to extend RegisteredClient to support a custom field called app_id. This value is provided in the dynamic ...
- 39
0
votes
1
answer
130
views
Spring Authorization Server ~ How to unregister default AuthenticationProviders
I am trying to implement OAuth2 authentication for an App in a Spring Boot backend using Spring Authorization Server. My problem is that I have custom logic that uses its own AuthenticationProviders, ...
- 2,570