308 questions
Score of 1
1 answer
238 views
JwtGenerator: authenticationTime cannot be null
So right after latest update to SpringBoot 4.0.6, with my spring-boot-starter-oauth2-authorization-server I keep getting following exception:
java.lang.IllegalArgumentException: authenticationTime ...
Score of 1
1 answer
731 views
Spring Authorization Server OAuth2AuthorizationServerConfigurer.authorizationServer() method not found
I am new to spring security. I have been looking to build an authorization server and I have went through a couple of documentations. I saw that all of them have used something like:
...
Score of 0
0 answers
105 views
How to setup Spring Authorization Server, Spring Cloud Gateway MVC and OAuth2 Resource Server?
I am working on an application to better understand the Spring Security and microservcies architecture.
I have setup:
Spring Authorization Server
Spring Cloud Gateway MVC
OAuth2 Resource Server
...
Score of 0
0 answers
46 views
Spring authorization server get access token fail
I am running a spring security oauth2 authorization server 1.5.3.
I use postman to get an access token. Following is my request body in post man:
I have double-checked the parameters, they seem OK, ...
Score of -1
1 answer
192 views
Spring Authorization Server – /login keeps returning 403 instead of showing login page [closed]
I am learning Spring Authorization Server and trying to build a simple OAuth2 Authorization Server without OpenID Connect.
i want to handle the login page myself inside the same Authorization Server ...
Best practices
0
votes
1
replies
67
views
SpringC loud Gateway and Spring Authorisation Server Common Session storage
I have a Spring Authorisation Server as my OAuth2-OpenID Connect authentication server running with multiple instances on a cluster. It uses Spring Session Redis for managing distributed sessions. ...
Score of 0
0 answers
132 views
How to implement non-plain-text password transmission in Spring Authorization Server 1.4.3 (password grant extension)
I’m using Spring Authorization Server 1.4.3 to build an authentication center.
I’ve extended the authorization server to support the password grant type, so clients can obtain access tokens via the /...
Score of 0
0 answers
84 views
how to save the client-id from request cache when a user is redirected to the spring authorization server?
I have implemented or extended on top of Spring Authorization server. I have a authentication controller that accesses the client-id from the RequestCache object.
Now, I have built a sample OAuth app ...
Score of 0
0 answers
72 views
Does Spring Authorization supports FAPI 2.0
I'm trying to do a PoC on FAPI 2.0 for which I want to have an authorization server that supports FAPI2.0 along with the control over IDP integration, user database, OIDC provider and onboarding third ...
Score of 0
0 answers
91 views
Spring OAuth2 login page doesn’t load correctly when accessed through Gateway
I’m using a Spring OAuth2 Authorization Server with a Gateway in front of it.
When I access the login page directly via http://localhost:9999 (the OAuth2 server port), everything works: the CSS loads ...
Score of 0
1 answer
210 views
Spring OAuth2 Authorization Server: IllegalArgumentException when deserializing custom User class after consent approval
I'm trying to set up a Spring Authorization Server for learning purposes. The login and consent screens work, but after I approve the consent screen and submit the /authorize request, I get the ...
Score of 0
1 answer
146 views
Where should roles and missions/ACLs be managed when building an authorization server?
I’m trying to build my own Spring Authorization Server (for learning purposes and possibly to use across multiple projects in the future).
I’m already familiar with Spring Security and resource server ...
Score of 0
0 answers
138 views
Oauth2 Logout fails when the token is refreshed using the refresh token. message: Logout request failed: [invalid_token] id_token_hint
alright gpt did not help with this one. so my problem is that logout fails when the token has been refreshed using the refresh token. spring auth server says id_token_hint has expired because it's ...
Score of 0
1 answer
172 views
Spring Authorization Server ~ How to unregister default AuthenticationProviders
I am trying to implement OAuth2 authentication for an App in a Spring Boot backend using Spring Authorization Server. My problem is that I have custom logic that uses its own AuthenticationProviders, ...
Score of 1
1 answer
98 views
How to log client information upon successful client credentials flow is performed in Spring Boot Authorization Server
I want to log RegisteredClient.clientId, RegisteredClient.clientName when it performs successful client credentials flow. How can I achieve this?
Current Behavior
I checked logs (with TRACE level) ...