Class ImplicitGrantConfigurer<B extends HttpSecurityBuilder<B>>
- java.lang.Object
-
- org.springframework.security.config.annotation.SecurityConfigurerAdapter<DefaultSecurityFilterChain,B>
-
- org.springframework.security.config.annotation.web.configurers.AbstractHttpConfigurer<ImplicitGrantConfigurer<B>,B>
-
- org.springframework.security.config.annotation.web.configurers.oauth2.client.ImplicitGrantConfigurer<B>
-
- All Implemented Interfaces:
SecurityConfigurer<DefaultSecurityFilterChain,B>
@Deprecated public final class ImplicitGrantConfigurer<B extends HttpSecurityBuilder<B>> extends AbstractHttpConfigurer<ImplicitGrantConfigurer<B>,B>
Deprecated.It is not recommended to use the implicit flow due to the inherent risks of returning access tokens in an HTTP redirect without any confirmation that it has been received by the client. See reference OAuth 2.0 Implicit Grant.AnAbstractHttpConfigurer
for the OAuth 2.0 Implicit Grant type.Security Filters
The followingFilter
's are populated:Shared Objects Created
The following shared objects are populated:ClientRegistrationRepository
(required)
Shared Objects Used
The following shared objects are used:- Since:
- 5.0
- See Also:
OAuth2AuthorizationRequestRedirectFilter
,ClientRegistrationRepository
-
-
Constructor Summary
Constructors Constructor Description ImplicitGrantConfigurer()
Deprecated.
-
Method Summary
All Methods Instance Methods Concrete Methods Deprecated Methods Modifier and Type Method Description ImplicitGrantConfigurer<B>
authorizationRequestBaseUri(java.lang.String authorizationRequestBaseUri)
Deprecated.Sets the baseURI
used for authorization requests.ImplicitGrantConfigurer<B>
clientRegistrationRepository(ClientRegistrationRepository clientRegistrationRepository)
Deprecated.Sets the repository of client registrations.void
configure(B http)
Deprecated.Configure theSecurityBuilder
by setting the necessary properties on theSecurityBuilder
.-
Methods inherited from class org.springframework.security.config.annotation.web.configurers.AbstractHttpConfigurer
disable, getSecurityContextHolderStrategy, withObjectPostProcessor
-
Methods inherited from class org.springframework.security.config.annotation.SecurityConfigurerAdapter
addObjectPostProcessor, and, getBuilder, init, postProcess, setBuilder
-
-
-
-
Method Detail
-
authorizationRequestBaseUri
public ImplicitGrantConfigurer<B> authorizationRequestBaseUri(java.lang.String authorizationRequestBaseUri)
Deprecated.Sets the baseURI
used for authorization requests.- Parameters:
authorizationRequestBaseUri
- the baseURI
used for authorization requests- Returns:
- the
ImplicitGrantConfigurer
for further configuration
-
clientRegistrationRepository
public ImplicitGrantConfigurer<B> clientRegistrationRepository(ClientRegistrationRepository clientRegistrationRepository)
Deprecated.Sets the repository of client registrations.- Parameters:
clientRegistrationRepository
- the repository of client registrations- Returns:
- the
ImplicitGrantConfigurer
for further configuration
-
configure
public void configure(B http)
Deprecated.Description copied from interface:SecurityConfigurer
Configure theSecurityBuilder
by setting the necessary properties on theSecurityBuilder
.- Specified by:
configure
in interfaceSecurityConfigurer<DefaultSecurityFilterChain,B extends HttpSecurityBuilder<B>>
- Overrides:
configure
in classSecurityConfigurerAdapter<DefaultSecurityFilterChain,B extends HttpSecurityBuilder<B>>
-
-