Closed
Description
Summary
Improve org.springframework.security.config.web.server.ServerHttpSecurity.OAuth2LoginSpec
for more configuration options.
Actual Behavior
- Chaining of
OAuth2LoginSpec
not available, missingpublic ServerHttpSecurity and() { return ServerHttpSecurity.this; }
- Static routes for
/oauth2/authorization/{registrationId}
/login/oauth2/code/{registrationId}
Expected Behavior
-
allow chaining
-
- allow to override/configure
oauthRedirectFilter
(orauthorizationRequestBaseUri
in particular) - allow to override/configure
AuthenticationWebFilter.requiresAuthenticationMatcher
(orPathPatternParserServerWebExchangeMatcher
->pattern
=>requestBaseUri
in particular)
- allow to override/configure
Configuration
http.oauth2Login();
Version
Boot 2.1.0.SNAPSHOT
Spring Security 5.1.0.M2