Package org.springframework.security.oauth2.server.authorization.config.annotation.web.configuration

Class OAuth2AuthorizationServerConfiguration

java.lang.Object

org.springframework.security.oauth2.server.authorization.config.annotation.web.configuration.OAuth2AuthorizationServerConfiguration

@Configuration(proxyBeanMethods=false)
public class OAuth2AuthorizationServerConfiguration
extends Object

Configuration for OAuth 2.0 Authorization Server support.

Since:

0.0.1

See Also:

• OAuth2AuthorizationServerConfigurer

Constructor Summary

Constructors

Constructor	Description
OAuth2AuthorizationServerConfiguration()

Method Summary

Modifier and Type	Method	Description
static void	applyDefaultSecurity(org.springframework.security.config.annotation.web.builders.HttpSecurity http)	Deprecated, for removal: This API element is subject to removal in a future version. For removal in 2.0.
org.springframework.security.web.SecurityFilterChain	authorizationServerSecurityFilterChain(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
static org.springframework.security.oauth2.jwt.JwtDecoder	jwtDecoder(com.nimbusds.jose.jwk.source.JWKSource<com.nimbusds.jose.proc.SecurityContext> jwkSource)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

OAuth2AuthorizationServerConfiguration

public OAuth2AuthorizationServerConfiguration()

Method Details

authorizationServerSecurityFilterChain

@Bean
@Order(-2147483648)
public org.springframework.security.web.SecurityFilterChain authorizationServerSecurityFilterChain(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
                                                                                            throws Exception

Throws:

Exception

applyDefaultSecurity

@Deprecated(since="1.4",
            forRemoval=true)
public static void applyDefaultSecurity(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
                                 throws Exception

Deprecated, for removal: This API element is subject to removal in a future version.

For removal in 2.0. Use AbstractConfiguredSecurityBuilder.with(SecurityConfigurerAdapter, Customizer) and pass in OAuth2AuthorizationServerConfigurer.authorizationServer().

Parameters:

http - the HttpSecurity

Throws:

Exception - if OAuth2AuthorizationServerConfigurer could not be applied

jwtDecoder

public static org.springframework.security.oauth2.jwt.JwtDecoder jwtDecoder(com.nimbusds.jose.jwk.source.JWKSource<com.nimbusds.jose.proc.SecurityContext> jwkSource)