-
Notifications
You must be signed in to change notification settings - Fork 6.1k
Closed
Labels
in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)status: backportedAn issue that has been backported to maintenance branchesAn issue that has been backported to maintenance branchestype: enhancementA general enhancementA general enhancement
Milestone
Description
The OAuth 2.0 implementations of AuthenticationProvider
and ReactiveAuthenticationManager
perform an exact match on OAuth2AuthorizationRequest.getRedirectUri()
and OAuth2AuthorizationResponse.getRedirectUri()
, which is redundant given that the exact matching is also happening in the associated Filter
and WebFilter
.
We should remove this double validation since the check will always pass if the AuthenticationProvider
or ReactiveAuthenticationManager
is called.
Metadata
Metadata
Assignees
Labels
in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)status: backportedAn issue that has been backported to maintenance branchesAn issue that has been backported to maintenance branchestype: enhancementA general enhancementA general enhancement