Skip to content

DefaultServerOAuth2AuthorizationRequestResolver should use fromUri #6952

Closed
@rwinch

Description

@rwinch

Summary

DefaultServerOAuth2AuthorizationRequestResolver should use UriComponentsBuilder.fromUri rather than HttpComponentsBuilder.fromHttpRequest to be consistent with the rest of Spring Security and to ensure users opt into using request headers.

Metadata

Metadata

Assignees

Labels

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)status: backportedAn issue that has been backported to maintenance branchestype: bugA general bug

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions