Skip to main content
312 questions
Newest Active Bountied Unanswered
Filter by
Sorted by
Tagged with
-1 votes
0 answers
89 views

I have 2 instances of Spring Authorization Server (SAS), running locally behind nginx. My SAS is using: Spring Session JDBC to save session to oracle db JdbcOauth2AuthorizationService to save ...
Stephan Tommy's user avatar
  • 1
0 votes
1 answer
438 views

I am new to spring security. I have been looking to build an authorization server and I have went through a couple of documentations. I saw that all of them have used something like: ...
Farhad Zada's user avatar
  • 1
0 votes
0 answers
85 views

I am working on an application to better understand the Spring Security and microservcies architecture. I have setup: Spring Authorization Server Spring Cloud Gateway MVC OAuth2 Resource Server ...
Hardik Kumar's user avatar
  • 1
0 votes
0 answers
34 views

I am running a spring security oauth2 authorization server 1.5.3. I use postman to get an access token. Following is my request body in post man: I have double-checked the parameters, they seem OK, ...
Mrhan's user avatar
  • 1
-1 votes
1 answer
162 views

I am learning Spring Authorization Server and trying to build a simple OAuth2 Authorization Server without OpenID Connect. i want to handle the login page myself inside the same Authorization Server ...
Praveen kumar's user avatar
  • 120
Best practices
0 votes
1 replies
56 views

I have a Spring Authorisation Server as my OAuth2-OpenID Connect authentication server running with multiple instances on a cluster. It uses Spring Session Redis for managing distributed sessions. ...
Deepak Katariya's user avatar
  • 33
0 votes
0 answers
121 views

I’m using Spring Authorization Server 1.4.3 to build an authentication center. I’ve extended the authorization server to support the password grant type, so clients can obtain access tokens via the /...
JacobChan's user avatar
  • 181
0 votes
0 answers
73 views

I have implemented or extended on top of Spring Authorization server. I have a authentication controller that accesses the client-id from the RequestCache object. Now, I have built a sample OAuth app ...
Katlock's user avatar
  • 1,430
0 votes
0 answers
53 views

I'm trying to do a PoC on FAPI 2.0 for which I want to have an authorization server that supports FAPI2.0 along with the control over IDP integration, user database, OIDC provider and onboarding third ...
HyperioN's user avatar
  • 4,048
0 votes
0 answers
84 views

I’m using a Spring OAuth2 Authorization Server with a Gateway in front of it. When I access the login page directly via http://localhost:9999 (the OAuth2 server port), everything works: the CSS loads ...
Mast Reyheart's user avatar
  • 83
0 votes
1 answer
162 views

I'm trying to set up a Spring Authorization Server for learning purposes. The login and consent screens work, but after I approve the consent screen and submit the /authorize request, I get the ...
Gaurav Kumar's user avatar
  • 65
0 votes
1 answer
119 views

I’m trying to build my own Spring Authorization Server (for learning purposes and possibly to use across multiple projects in the future). I’m already familiar with Spring Security and resource server ...
Gaurav Kumar's user avatar
  • 65
0 votes
0 answers
107 views

I'm using Spring Authorization Server together with Spring Boot Actuator and Micrometer Prometheus integration. For metrics like http_server_requests_seconds_count, I’m seeing many uri="UNKNOWN&...
Muhammad Ans's user avatar
  • 1
0 votes
0 answers
113 views

alright gpt did not help with this one. so my problem is that logout fails when the token has been refreshed using the refresh token. spring auth server says id_token_hint has expired because it's ...
usertest's user avatar
  • 2,320
0 votes
0 answers
47 views

I'm using Spring Authorization Server with JDBC and dynamic client registration. I want to extend RegisteredClient to support a custom field called app_id. This value is provided in the dynamic ...
Ramon10's user avatar
  • 39
0 votes
1 answer
152 views

I am trying to implement OAuth2 authentication for an App in a Spring Boot backend using Spring Authorization Server. My problem is that I have custom logic that uses its own AuthenticationProviders, ...
Kira Resari's user avatar
  • 2,590
0 votes
0 answers
35 views

I am trying to use Spring Authorization Server as such: My application is providing a OIDC Provider endpoint such that it works as an authorization server for third parties (e.g. Zitadel) But only ...
Marco's user avatar
  • 1
1 vote
1 answer
92 views

I want to log RegisteredClient.clientId, RegisteredClient.clientName when it performs successful client credentials flow. How can I achieve this? Current Behavior I checked logs (with TRACE level) ...
Imtiaz Shakil Siddique's user avatar
  • 4,450
-1 votes
1 answer
72 views

i'm learing to Spring oauth2 Client and Spring authorization server and I faced such a problem that I can not set the header on the redirect request from the gateway to the authorization server. Cors ...
Merkodanov's user avatar
  • 1
2 votes
1 answer
403 views

I recently began developing an OAuth/OIC identity provider with Spring Boot 3, Spring Security 6, and Spring Authorization Server. I'm new to OAuth but have some experience with session-based web ...
leo's user avatar
  • 35
1 vote
0 answers
190 views

I'm trying to write my custom OAuth2 Token Revocation Endpoint as explained here but I'm facing an issue. Inside my custom .errorResponseHandler(errorResponseHandler) I want to catch and handle the ...
fforfabio's user avatar
  • 198
0 votes
0 answers
59 views

I am working on a new micro-service design that I hope to deploy to Azure. I would like to have a Spring Authorization Server that handles all authentication and authorization users against our Azure ...
sonoerin's user avatar
  • 5,205
0 votes
1 answer
359 views

I use Spring Authorization Server 1.4.0 with React Client. By default I have end_session_endpoint param set to "end_session_endpoint":"http://host/connect/logout" in http://host/....
Peter Penzov's user avatar
  • 1,228
0 votes
2 answers
495 views

for some reason the authenticationManager is not being added to the context, that's what I imagine, because I'm getting an error: "Factory method 'authorizationServerSecurityFilterChain' threw ...
user3324336's user avatar
  • 51
2 votes
2 answers
840 views

My project setup has one security chain filter and the csrf is disabled. With the following spring environment, code works as expected. spring version 6.2.2 spring-security version 6.4.2 spring-...
Sunil's user avatar
  • 103
0 votes
2 answers
153 views

I would like to customize Access token based on authorization code which is sent in the token endpoint reqeust. I am doing this as per spring boot Oauth2 documentation.Token customisation Specifically,...
stuckWithIt's user avatar
  • 3
0 votes
0 answers
57 views

I am trying to implement spring authorization server with social login. I want a user to login using GitHub and after successful login, I want to issue a token to the user from my authorisation ...
George Jose's user avatar
  • 262
0 votes
0 answers
132 views

I have a Spring MVC applicaton which used the legacy spring-security-oauth2 library as authorization server and resource server. The spring security was configured in xml format.Also, the ...
hellokk's user avatar
  • 43
0 votes
1 answer
276 views

Continue for this problem, I still don't get any solution for handling my problem, issue 1865. I want to have spring authorization server with opaque token and oidc enabled. Once oidc enabled, it ...
Malvin's user avatar
  • 1
1 vote
0 answers
80 views

I would like to use Spring Authorization Server in High Availability mode, with for example 2 nodes behind a load balancer. I do not see anything in the documentation regarding a specific ...
rico's user avatar
  • 1,955
1 vote
3 answers
461 views

We have two filter chains (beans) configured in our SecurityConfig: oauth2ProtocolEndpointsSecurityFilterChain with order 1 (authServer config) userEndpointsSecurityFilterChain with order 2 (config ...
Erlend Garåsen's user avatar
  • 190
0 votes
1 answer
154 views

I'm trying to create this JUnit test for Spring Authorization Server: import org.junit.jupiter.api.Test; import org.mockito.Mock; import org.springframework.beans.factory.annotation.Autowired; import ...
Peter Penzov's user avatar
  • 1,228
1 vote
0 answers
105 views

I would like to have the authentication server handle user authentication without requiring login form input. In oauth2 authorization server version 0.3.1, it was processed through ...
neo.k's user avatar
  • 11
1 vote
1 answer
458 views

I am confused at what is causing this error, I first started noticing this when I migrated from version 1.2 to 1.4 of the spring oauth2 authorization server. Below you will find relevant files to help ...
Grant mitchell's user avatar
  • 551
0 votes
1 answer
74 views

I want to create a BFF micro-service, which would be responsible for (among other things) forwarding username/password credentials to Keycloak (where Keycloak issues a JWT token) and for validating ...
Emil Avramov's user avatar
  • 37
0 votes
1 answer
271 views

The goal is to have both authentication and token assignment under /oauth2/token endpoint. There is an expectation, that for example when application receives correct credentials: POST http://...
Czarek's user avatar
  • 689
1 vote
1 answer
119 views

I have a custom login page that apart from the username and password I have the document type field and remember, how can I capture them in my personalized CustomDaoAuthenticationProvider to be able ...
Favio Amarilla Miño's user avatar
  • 11
0 votes
1 answer
102 views

I want to add a TenantIdentificationFilter in the Spring Authorization Server. I am trying to configure it as mentioned in this post. This however is producing the error Cannot resolve symbol '...
George Jose's user avatar
  • 262
1 vote
1 answer
222 views

I have a problem with assigning role-based access control on my SpringBoot application. I created a new API in Auth0 and assigned permissions to the API and enabled RBAC in the API. And authorized the ...
navodsamu's user avatar
  • 13
0 votes
1 answer
180 views

Security configuration @Configuration @EnableWebSecurity public class SecurityConfig { @Bean @Order(1) public SecurityFilterChain authorizationServerSecurityFilterChain(HttpSecurity http) ...
San Jaisy's user avatar
  • 17.5k
0 votes
0 answers
94 views

While integrating Spring Authorization Server in my system for the oauth2 basic workflow, i found myself in potential situations regarding the future extensions for this. Is any of the following ...
loredon's user avatar
  • 81
0 votes
2 answers
90 views

This is my setup. I have a kong community server running as a gateway and all sort of different clients to access resource services via routes in the backend. To unify the authentification (that all ...
Otis Ottington's user avatar
  • 479
0 votes
0 answers
38 views

I aam upgrading my Spring Boot application from Java 8 to Java 21 and Spring boot 2.2 to 3.2. After upgrading I am getting this error on startup |WARN | o.s.b.a.o.j.JpaBaseConfiguration$...
Sudan Shrestha's user avatar
  • 107
0 votes
1 answer
809 views

I am currently in the process of migrating the application from Java 8 to Java 21 and Spring Boot 2.2 to Spring Boot 3.2. I am currently facing trouble with security. My application has both an ...
Sudan Shrestha's user avatar
  • 107
0 votes
0 answers
149 views

In the implementation of Custom OAuth2 Authorization Server using Spring Boot, how is it possible to create a custom consent screen that asks for different consents based on which user has logged in? ...
Harshad Prajapati's user avatar
  • 1
2 votes
2 answers
302 views

I want to create a custom implementation of Spring Authorization Server with 2 custom federation providers: First provider to authenticate clients with AuthorizationGrantType.AUTHORIZATION_CODE for ...
Peter Penzov's user avatar
  • 1,228
0 votes
0 answers
132 views

I am developing an application that consists of a gateway as a oauth2-client and an authorization server. I do not quite understand, based on what information, the session timeout for these services ...
Elena's user avatar
  • 23
-1 votes
1 answer
86 views

I have oauth2 client and oauth2 authorization server when I try to open a protected url of client. (it has a cookie a certain session). then it redirects to clients own path /oauth2/authorization/api-...
Nazhibolla Magzum's user avatar
  • 1
1 vote
1 answer
1k views

I'm using Spring Authorization Server v3.3.1. My current well-known endpoint is <hostname>/.well-known/openid-configuration and this returns the standard OpenId configuration. I want to remove a ...
Suvin Nimnaka Sukka's user avatar
  • 512
0 votes
0 answers
84 views

I'm starting a new project with Spring Authorization Server 1.3.2 to use it in a new portal that it will be developed with Angular. Clients will be able to access to it's own private area using ...
allen_ajd3's user avatar
  • 35

1
2 3 4 5
…
7