Class ImplicitGrantConfigurer<B extends HttpSecurityBuilder<B>>
java.lang.Object
org.springframework.security.config.annotation.SecurityConfigurerAdapter<DefaultSecurityFilterChain,B>
org.springframework.security.config.annotation.web.configurers.AbstractHttpConfigurer<ImplicitGrantConfigurer<B>,B>
org.springframework.security.config.annotation.web.configurers.oauth2.client.ImplicitGrantConfigurer<B>
- All Implemented Interfaces:
SecurityConfigurer<DefaultSecurityFilterChain,
B>
@Deprecated
public final class ImplicitGrantConfigurer<B extends HttpSecurityBuilder<B>>
extends AbstractHttpConfigurer<ImplicitGrantConfigurer<B>,B>
Deprecated.
It is not recommended to use the implicit flow due to the inherent risks of
returning access tokens in an HTTP redirect without any confirmation that it has been
received by the client. See reference
OAuth 2.0 Implicit
Grant.
An
AbstractHttpConfigurer
for the OAuth 2.0 Implicit Grant type.
Security Filters
The followingFilter
's are populated:
Shared Objects Created
The following shared objects are populated:ClientRegistrationRepository
(required)
Shared Objects Used
The following shared objects are used:- Since:
- 5.0
- See Also:
-
Constructor Summary
-
Method Summary
Modifier and TypeMethodDescriptionauthorizationRequestBaseUri
(String authorizationRequestBaseUri) Deprecated.Sets the baseURI
used for authorization requests.clientRegistrationRepository
(ClientRegistrationRepository clientRegistrationRepository) Deprecated.Sets the repository of client registrations.void
Deprecated.Configure theSecurityBuilder
by setting the necessary properties on theSecurityBuilder
.Methods inherited from class org.springframework.security.config.annotation.web.configurers.AbstractHttpConfigurer
disable, withObjectPostProcessor
Methods inherited from class org.springframework.security.config.annotation.SecurityConfigurerAdapter
addObjectPostProcessor, and, getBuilder, init, postProcess, setBuilder
-
Constructor Details
-
ImplicitGrantConfigurer
public ImplicitGrantConfigurer()Deprecated.
-
-
Method Details
-
authorizationRequestBaseUri
Deprecated.Sets the baseURI
used for authorization requests.- Parameters:
authorizationRequestBaseUri
- the baseURI
used for authorization requests- Returns:
- the
ImplicitGrantConfigurer
for further configuration
-
clientRegistrationRepository
public ImplicitGrantConfigurer<B> clientRegistrationRepository(ClientRegistrationRepository clientRegistrationRepository) Deprecated.Sets the repository of client registrations.- Parameters:
clientRegistrationRepository
- the repository of client registrations- Returns:
- the
ImplicitGrantConfigurer
for further configuration
-
configure
Deprecated.Description copied from interface:SecurityConfigurer
Configure theSecurityBuilder
by setting the necessary properties on theSecurityBuilder
.- Specified by:
configure
in interfaceSecurityConfigurer<DefaultSecurityFilterChain,
B extends HttpSecurityBuilder<B>> - Overrides:
configure
in classSecurityConfigurerAdapter<DefaultSecurityFilterChain,
B extends HttpSecurityBuilder<B>>
-