Menu
I'm trying to integrate external oauth 2 authentication server and resource server. Their configuration requires some additional custom parameters: state - should be uuid, TimeStamp, accessType, also clientSecret should be signed using a combination of all previous params as data.
We are using Spring boot, spring security 5.1, Camunda.
The catch is I can't directly add params to URI calling method setUserAuthorizationUri cause this method is called only once during initialization
589
The OAuth 2.0 authorization framework is a protocol that allows a user to grant a third-party web site or application access to the user's protected resources, without necessarily revealing their long-term credentials or even their identity.
Deprecated. Strategy for extracting an Authorization header from an access token and the request details.
OAuth2AccessToken. enhance(OAuth2AccessToken accessToken, OAuth2Authentication authentication) Provides an opportunity for customization of an access token (e.g. through its additional information map) during the process of creating a new token for use by a client.
The OAuth2AuthorizationRequestResolver provides the ability to customize the Authorization Request with additional parameters above the standard parameters and/or removing/changing one of the standard parameters. See the reference doc on OAuth2AuthorizationRequestResolver for implementation details.
178
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With
