Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Spring Security OAuth2 support for resource server. #77

Open
gm2552 opened this issue Jul 27, 2022 · 0 comments
Open

Spring Security OAuth2 support for resource server. #77

gm2552 opened this issue Jul 27, 2022 · 0 comments

Comments

@gm2552
Copy link
Contributor

gm2552 commented Jul 27, 2022

The service bindings library currently supports the oAuth 2 client settings for spring security which works very well. In many cases where an oAuth2 client is present in an application stack, additional applications will play the role of resource servers. The following articulates articulates a few patterns: https://www.baeldung.com/spring-cloud-gateway-oauth2

With the release of the AppSSO package in TAP 1.2 and the use of the ClientRegistration CRD, the ability to use service bindings for oAuth2 and OIDC facilitates the creation and distribution of oAuth properties for application consumption. Currently, there is not a capability to use service bindings secrets to populate resource server properties in spring boot apps. It would be ideal for resource server applications to be able use service bindings to population spring. security.auth2.resourceserver properties.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant