772 questions
- Bountied 0
- Unanswered
- Frequent
- Score
- Trending
- Week
- Month
- Unanswered (my tags)
0
votes
1
answer
91
views
OAuth2 login and linking associated OAuth2 clients to the logged in user
The intent of the Spring Boot application I'm building is to have a login against an IDP (Spring Security OAuth2 Login). For access to several third party APIs (Spring Security OAuth2 Client) I will ...
0
votes
0
answers
60
views
Spring OAuth client-credential flow with dynamic custom audience & scope
Scenario
Auth0 application (client-id/secret) internal-services
Authorised to use apiA (audience: http//apiA)
Authorised to use apiB (audience: http//apiB)
Monolith app that wants to call apiA and ...
0
votes
1
answer
154
views
Oauth2Client calling an api (no proxy) with provider Azure entra (behind a proxy)
I have a spring boot application that tries to consume a REST api that is secured by oauth2 and uses Azure Entra as identity provider. Now while my app and the api are within our company network I ...
0
votes
0
answers
40
views
Creating authentication server endpoint compatible with spring.security.oauth2.resourceserver.jwt.jwk-set-uri
I have an authentication server that issues JWT tokens. It uses the io.jsonwebtoken library (a plain Security starter is also available).
<parent>
<groupId>org.springframework....
0
votes
1
answer
195
views
Spring boot oauth2 does not invoke successHandler and always redirects to "/" after authentication
I am trying to set up a basic google oauth setup for a spring boot app. My idea is that frontend will redirect to a url like http://localhost:8081/oauth2/authorization/google and after authentication, ...
0
votes
2
answers
133
views
How can I access an API with a technical user while authorized with a user token?
We have a Spring Security setup accessing a Keycloak server which provides us with a user token containing information about the user. However, we also need to make API calls to services (in our case, ...
0
votes
0
answers
72
views
Spring OAuth Client filter order is wrong
I hope someone can understand this. I have a very basic Spring boot Auth server and OAuth client implementation here:
https://github.com/numankaraaslan/SpringBootOauth2
In OAuth client code, you can ...
0
votes
0
answers
62
views
Spring Security CORS Issue: "Credentials flag is true, but Access-Control-Allow-Credentials is not 'true'"
I'm working on an OAuth2 login flow using Spring Security (Kotlin, Spring Boot 3), and I'm running into a CORS issue when handling the redirect back to the frontend after successful authentication.
...
1
vote
1
answer
57
views
Springboot oauth2 login adding a correlation id
I am using OAuth2 login in my spring boot project. I am calling the url as http://localhost:8080/oauth2/authorization/google?corrID=123456 form my client application. I would like to store this ...
-1
votes
2
answers
97
views
OAuth 2 resource server doesn't put claims into authorities
I'm getting an access token from a Spring Authorization Server that has claim "roles".
Then i try to put roles in authorities.
@Bean
public SecurityFilterChain securityFilterChain(...
1
vote
2
answers
213
views
Spring validating constraints before security scopes
I have a Spring Boot 3.4 service secured with Spring Security OAuth2.
My security configuration is standard:
@Bean
public SecurityFilterChain oauth2FilterChain(HttpSecurity http) throws ...
0
votes
1
answer
134
views
Spring Boot Resource Server: "tokenValue cannot be empty" during Error Handling after Successful Authentication
I am building a Spring Boot application using the Backend for Frontend (BFF) pattern. I'm using React for the frontend, Spring Cloud Gateway as the OAuth client, Keycloak as the authorization server, ...
0
votes
2
answers
429
views
Issue with authenticationManager in Spring SecurityConfig Authorization Server
for some reason the authenticationManager is not being added to the context, that's what I imagine, because I'm getting an error:
"Factory method 'authorizationServerSecurityFilterChain' threw ...
0
votes
0
answers
39
views
Spring Authorization Server Question, Authorization Code is always invalid grant when second authorize
In https,
I m using Spring Authorization Server.
When I first log-in, it wokrs very well as Authorization Grant.
but I try Second Login, Auhoriation Code doesnt work!
I can get the Authorization code ...
0
votes
1
answer
273
views
Exclude the spring boot security configuration inner package-private class
I have an external library that implements basic and oauth2 authorization.
And I have a SecurityFilterChain for basic authorization:
@Bean
@ConditionalOnMissingBean
public AuthorizeRequestsCustomizer ...