@@ -2900,7 +2900,7 @@ You can register multiple OAuth2 clients and providers under the
29002900 spring.security.oauth2.client.registration.my-client-1.client-name=Client for user scope
29012901 spring.security.oauth2.client.registration.my-client-1.provider=my-oauth-provider
29022902 spring.security.oauth2.client.registration.my-client-1.scope=user
2903- spring.security.oauth2.client.registration.my-client-1.redirect-uri=http://my-redirect-uri.com
2903+ spring.security.oauth2.client.registration.my-client-1.redirect-uri-template =http://my-redirect-uri.com
29042904 spring.security.oauth2.client.registration.my-client-1.client-authentication-method=basic
29052905 spring.security.oauth2.client.registration.my-client-1.authorization-grant-type=authorization_code
29062906
@@ -2909,7 +2909,7 @@ You can register multiple OAuth2 clients and providers under the
29092909 spring.security.oauth2.client.registration.my-client-2.client-name=Client for email scope
29102910 spring.security.oauth2.client.registration.my-client-2.provider=my-oauth-provider
29112911 spring.security.oauth2.client.registration.my-client-2.scope=email
2912- spring.security.oauth2.client.registration.my-client-2.redirect-uri=http://my-redirect-uri.com
2912+ spring.security.oauth2.client.registration.my-client-2.redirect-uri-template =http://my-redirect-uri.com
29132913 spring.security.oauth2.client.registration.my-client-2.client-authentication-method=basic
29142914 spring.security.oauth2.client.registration.my-client-2.authorization-grant-type=authorization_code
29152915
@@ -2920,6 +2920,28 @@ You can register multiple OAuth2 clients and providers under the
29202920 spring.security.oauth2.client.provider.my-oauth-provider.user-name-attribute=name
29212921----
29222922
2923+ By default, Spring Security's `OAuth2LoginAuthenticationFilter` will only process URLs matching
2924+ `/login/oauth2/code/*`. If you want to customize the `redirect-uri-template` to use a different pattern,
2925+ you will need to provide configuration to process that custom pattern. For example, you can add your own
2926+ `WebSecurityConfigurerAdapter` that looks like this:
2927+
2928+ [source,java,indent=0]
2929+ ----
2930+ public class OAuth2LoginSecurityConfig extends WebSecurityConfigurerAdapter {
2931+
2932+ @Override
2933+ protected void configure(HttpSecurity http) throws Exception {
2934+ http
2935+ .authorizeRequests()
2936+ .anyRequest().authenticated()
2937+ .and()
2938+ .oauth2Login()
2939+ .redirectionEndpoint()
2940+ .baseUri("/custom-callback");
2941+ }
2942+ }
2943+ ----
2944+
29232945For common OAuth2 and OpenID providers such as Google, Github, Facebook, and Okta,
29242946we provide a set of provider defaults (`google`, `github`, `facebook`, and `okta`
29252947respectively).
0 commit comments