Skip to content

Improve OAuth2LoginSpec with more configuration options #5598

Closed
@hartmut-co-uk

Description

@hartmut-co-uk

Summary

Improve org.springframework.security.config.web.server.ServerHttpSecurity.OAuth2LoginSpec
for more configuration options.

Actual Behavior

  1. Chaining of OAuth2LoginSpec not available, missing public ServerHttpSecurity and() { return ServerHttpSecurity.this; }
  2. Static routes for

    /oauth2/authorization/{registrationId}
    /login/oauth2/code/{registrationId}

Expected Behavior

  1. allow chaining

    1. allow to override/configure oauthRedirectFilter (or authorizationRequestBaseUri in particular)
    2. allow to override/configure AuthenticationWebFilter.requiresAuthenticationMatcher (or PathPatternParserServerWebExchangeMatcher -> pattern => requestBaseUri in particular)

Configuration

http.oauth2Login();

Version

Boot 2.1.0.SNAPSHOT
Spring Security 5.1.0.M2

Metadata

Metadata

Assignees

Labels

in: configAn issue in spring-security-configin: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)type: enhancementA general enhancement

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions