org.springframework.security.config.annotation.web.configurers.oauth2.client

Class ImplicitGrantConfigurer<B extends HttpSecurityBuilder<B>>

java.lang.Object

org.springframework.security.config.annotation.SecurityConfigurerAdapter<DefaultSecurityFilterChain,B>

org.springframework.security.config.annotation.web.configurers.AbstractHttpConfigurer<ImplicitGrantConfigurer<B>,B>

org.springframework.security.config.annotation.web.configurers.oauth2.client.ImplicitGrantConfigurer<B>

All Implemented Interfaces:

SecurityConfigurer<DefaultSecurityFilterChain,B>

Deprecated.

It is not recommended to use the implicit flow due to the inherent risks of returning access tokens in an HTTP redirect without any confirmation that it has been received by the client. See reference OAuth 2.0 Implicit Grant.

@Deprecated
public final class ImplicitGrantConfigurer<B extends HttpSecurityBuilder<B>>
extends AbstractHttpConfigurer<ImplicitGrantConfigurer<B>,B>

An AbstractHttpConfigurer for the OAuth 2.0 Implicit Grant type.

Security Filters

The following Filter's are populated:

• OAuth2AuthorizationRequestRedirectFilter

Shared Objects Created

The following shared objects are populated:

• ClientRegistrationRepository (required)

Shared Objects Used

The following shared objects are used:

• ClientRegistrationRepository

Since:

5.0

See Also:

OAuth2AuthorizationRequestRedirectFilter, ClientRegistrationRepository

Constructor Summary

Constructors

Constructor and Description
ImplicitGrantConfigurer() Deprecated.

Method Summary

Modifier and Type	Method and Description
ImplicitGrantConfigurer<B>	authorizationRequestBaseUri(java.lang.String authorizationRequestBaseUri) Deprecated. Sets the base URI used for authorization requests.
ImplicitGrantConfigurer<B>	clientRegistrationRepository(ClientRegistrationRepository clientRegistrationRepository) Deprecated. Sets the repository of client registrations.
void	configure(B http) Deprecated. Configure the SecurityBuilder by setting the necessary properties on the SecurityBuilder.

Methods inherited from class org.springframework.security.config.annotation.web.configurers.AbstractHttpConfigurer

disable, withObjectPostProcessor

Methods inherited from class org.springframework.security.config.annotation.SecurityConfigurerAdapter

addObjectPostProcessor, and, getBuilder, init, postProcess, setBuilder

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

ImplicitGrantConfigurer

public ImplicitGrantConfigurer()

Deprecated.

Method Detail

authorizationRequestBaseUri

public ImplicitGrantConfigurer<B> authorizationRequestBaseUri(java.lang.String authorizationRequestBaseUri)

Deprecated.

Sets the base URI used for authorization requests.

Parameters:

authorizationRequestBaseUri - the base URI used for authorization requests

Returns:

the ImplicitGrantConfigurer for further configuration

clientRegistrationRepository

public ImplicitGrantConfigurer<B> clientRegistrationRepository(ClientRegistrationRepository clientRegistrationRepository)

Deprecated.

Sets the repository of client registrations.

Parameters:

clientRegistrationRepository - the repository of client registrations

Returns:

the ImplicitGrantConfigurer for further configuration

configure

public void configure(B http)

Deprecated.

Description copied from interface: SecurityConfigurer

Configure the SecurityBuilder by setting the necessary properties on the SecurityBuilder.

Specified by:

configure in interface SecurityConfigurer<DefaultSecurityFilterChain,B extends HttpSecurityBuilder<B>>

Overrides:

configure in class SecurityConfigurerAdapter<DefaultSecurityFilterChain,B extends HttpSecurityBuilder<B>>