Add ability to disable endpoints related to oidc

Issue spring-projectsgh-1882

Signed-off-by: Tommy Tsang <[email protected]>

Author: tommyttf

Diff for: oauth2-authorization-server/src/main/java/org/springframework/security/oauth2/server/authorization/config/annotation/web/configurers/OidcConfigurer.java

@@ -15,11 +15,6 @@
  */
 package org.springframework.security.oauth2.server.authorization.config.annotation.web.configurers;
 
-import java.util.ArrayList;
-import java.util.LinkedHashMap;
-import java.util.List;
-import java.util.Map;
-
 import org.springframework.security.config.Customizer;
 import org.springframework.security.config.annotation.ObjectPostProcessor;
 import org.springframework.security.config.annotation.web.builders.HttpSecurity;
@@ -30,6 +25,11 @@
 import org.springframework.security.web.util.matcher.RequestMatcher;
 import org.springframework.web.util.UriComponentsBuilder;
 
+import java.util.ArrayList;
+import java.util.LinkedHashMap;
+import java.util.List;
+import java.util.Map;
+
 /**
  * Configurer for OpenID Connect 1.0 support.
  *
@@ -73,6 +73,11 @@ public OidcConfigurer providerConfigurationEndpoint(
 		return this;
 	}
 
+	public OidcConfigurer disableProviderConfigurationEndpoint() {
+		removeConfigurer(OidcProviderConfigurationEndpointConfigurer.class);
+		return this;
+	}
+
 	/**
 	 * Configures the OpenID Connect 1.0 RP-Initiated Logout Endpoint.
 	 * @param logoutEndpointCustomizer the {@link Customizer} providing access to the
@@ -85,6 +90,11 @@ public OidcConfigurer logoutEndpoint(Customizer<OidcLogoutEndpointConfigurer> lo
 		return this;
 	}
 
+	public OidcConfigurer disableLogoutEndpoint() {
+		removeConfigurer(OidcLogoutEndpointConfigurer.class);
+		return this;
+	}
+
 	/**
 	 * Configures the OpenID Connect Dynamic Client Registration 1.0 Endpoint.
 	 * @param clientRegistrationEndpointCustomizer the {@link Customizer} providing access
@@ -115,6 +125,11 @@ public OidcConfigurer userInfoEndpoint(Customizer<OidcUserInfoEndpointConfigurer
 		return this;
 	}
 
+	public OidcConfigurer disableUserInfoEndpoint() {
+		removeConfigurer(OidcUserInfoEndpointConfigurer.class);
+		return this;
+	}
+
 	@Override
 	void init(HttpSecurity httpSecurity) {
 		List<RequestMatcher> requestMatchers = new ArrayList<>();
@@ -165,4 +180,7 @@ private <T extends AbstractOAuth2Configurer> void addConfigurer(Class<T> configu
 		this.configurers.put(configurerType, configurer);
 	}
 
+	private void removeConfigurer(Class<?> configurerType) {
+		this.configurers.remove(configurerType);
+	}
 }