Update OAuth 2.0 Issuer-based Auto Configuration #17672
Labels
status: superseded
An issue that has been superseded by another
type: enhancement
A general enhancement
Uh oh!
There was an error while loading. Please reload this page.
Spring Security now supports deriving OAuth 2.0 configuration from multiple endpoint types.
Instead of calling:
Which only is aware of the OIDC Provider Configuration endpoint, Spring Boot could instead call:
which will first attempt the OIDC endpoint, and then try endpoints indicated in RFC 8414.
The text was updated successfully, but these errors were encountered: