-
Notifications
You must be signed in to change notification settings - Fork 6.2k
Closed
Labels
in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)status: backportedAn issue that has been backported to maintenance branchesAn issue that has been backported to maintenance branchestype: enhancementA general enhancementA general enhancement
Milestone
Description
The OAuth 2.0 implementations of AuthenticationProvider and ReactiveAuthenticationManager perform an exact match on OAuth2AuthorizationRequest.getRedirectUri() and OAuth2AuthorizationResponse.getRedirectUri(), which is redundant given that the exact matching is also happening in the associated Filter and WebFilter.
We should remove this double validation since the check will always pass if the AuthenticationProvider or ReactiveAuthenticationManager is called.
Metadata
Metadata
Assignees
Labels
in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)status: backportedAn issue that has been backported to maintenance branchesAn issue that has been backported to maintenance branchestype: enhancementA general enhancementA general enhancement