Questions tagged [spring-security-oauth2]

Spring Security's deprecated implementation of the OAuth2 spec. For OAuth2 with Spring Security 5 use Spring Security tag. We don't get many questions on OAuth 1(a) but feel free to tag them here.

Spring Security's deprecated implementation of the OAuth2 spec. The GitHub Project and the Spring Framework Website provide support for using Spring Security 4 with OAuth (1a) and OAuth2. It provides features for implementing both consumers and providers of these protocols using standard Spring and Spring Security programming models and configuration idioms.

3166 questions
1
vote
0 answers

Implement spring security SSO without redirect to auth server

I have SSO configured with a auth server which hosts login page and sso functionality using OAuth2. I have several clients which redirect to this auth server login page whenever authentication is required. What I am trying to achieve is to not…
Abhinav
  • 3,322
  • 9
  • 47
  • 63
1
vote
0 answers

Overload RequestMappings - Java

I am using Java with Spring Security and i wanna Overload my RequestMapping but i found errors: @RequestMapping("/") public ModelAndView index(OAuth2AuthenticationToken authentication) { Map userInfo =…
1
vote
0 answers

Generate JWT OAuth2 Access token without password

My Spring Boot authorization service is able to create JWT tokens for users with correct credentials. It shall also be possible to get a token via social login (Facebook in this case). The Facebook authentication already works and I find myself…
1
vote
1 answer

Spring Oauth2 Error "Token not found in request parameters" on entering username and password in custom login page

I have created custom login page in spring boot and spring-security-oauth2. On entering username and password getting error as o.s.s.o.p.a.BearerTokenExtractor : Token not found in headers. Trying request…
Ameet
  • 341
  • 7
  • 15
1
vote
1 answer

How to set success and failure handlers in OAuth2 WebFlux

In Spring Web (non-reactive), we can set the success and failure handlers for oauth2login as below: http.oauth2Login() .successHandler(oauth2AuthenticationSuccessHandler) .failureHandler(oauth2AuthenticationFailureHandler) But in WebFlux,…
1
vote
1 answer

is graphiQL supports spring security ? graphiQL UI is not working after adding spring security

JS CSS files are not loading I tried below code for allowing js and css file @Override public void configure(WebSecurity web) throws Exception { web.ignoring().antMatchers("/v2/api-docs", "/configuration/ui", …
1
vote
1 answer

How to replace Basic auth with Spring Boot security feature?

Currently we are using Basic auth and setting username and password in encrypted format to HttpHeaders. Is there any way to remove/replace this with any Springboot security? If yes, can you help me to implement this in my project.
ash das
  • 887
  • 7
  • 11
1
vote
0 answers

Secure different endpoints with different OAuth2 services

Is there any way to configure spring security to use a certain authorization for a group of endpoints and another authorization for another group? For example I want to authorize all endpoints that start with /facebook to use the Facebook login…
1
vote
2 answers

OAuth2 Open ID client authentication followed by LDAP user details & authorities

Our app is currently set up with OAuth OpenID connect authentication with an external (third-party) server. The requirement is to use user details service that loads the user from LDAP (along with the authorities/roles) to complete the…
akk202
  • 194
  • 1
  • 10
1
vote
0 answers

Add activation code to user registration using Spring and OAuth2

Our current user registration process is using Spring Boot, Spring Security ,Spring Security OAuth 2 and a React front end user interface. We have a create user API which you pass a username, password, user contact details etc and it returns you the…
Swordfish
  • 1,127
  • 24
  • 46
1
vote
1 answer

How to make spring-boot 1.5.0 support this oauth2 solution?

I am using spring boot 1.5.0 with java 7 and am using following classes for implementation of Oauth for securing REST API 1) AuthorizationServerConfiguration.java import org.springframework.beans.factory.annotation.Autowired; import…
sarabjeet
  • 43
  • 5
1
vote
1 answer

How do I get user details after user successfuly logs in with GitHub? I want to save some of the fields into databases

I'm trying to get few fields out of user's info when user logs in with Github. Info that I'm trying to get is 'login', 'bio', 'url'. How do I save specific fields to DB? When I use Authentication authentication = SecurityContextHolder.getContext() …
1
vote
0 answers

Problems with start application

I try to create simple application using Auth2 and when I try to run it, It failed with warning: 2019-08-08 10:15:36.575 WARN 11920 --- [ main] ConfigServletWebServerApplicationContext : Exception encountered during context…
1
vote
0 answers

Building SSO using Spring OAuth and Resource servers

Agenda: To create an authorization and resource server such that. Rest clients can authenticate and authorize and use tokens to fetch resources about the user. this worked. accessing resources defined at /rest/user endpoint is working fine Web…
John Eipe
  • 10,922
  • 24
  • 72
  • 114
1
vote
1 answer

Spring Security on WebLogic HTTP 401 issue

I've seen several posts with this topic but I didn't see any solution. My cas is quite simple as I'm testing Spring Boot 2.1.6.RELEASE with Spring Security 2.1.5.RELEASE (there doesn't seem to be a Spring Security 2.1.6.RELEASE). The only specfific…
user6882156