-
**Environment**:
- *Jib version:* 3.3.1
- *Build tool:* jib-gradle-plugin:3.3.1
- *OS:* ubuntu/docker-container
**Description of the issue**: When I update a dependency (for example due t…
-
### Summary
When receiving an Oauth2 JWT token and parsing the additionalIformations (idToken), JwtHelper.header(idToken) fail to parse fields containing ":".
### Actual Behavior
The field …
-
Spring Cloud offers some auto-configuration for its `@FeignClient` which entered maintenance mode in favor of `RestClient` and `WebClient` used with `HttpServiceProxyFactory` for `@HttpExchange`.
T…
-
could not able to resolve compile('org.springframework.security:spring-security-jwt') with spring cloud dependency management Finchley.BUILD-SNAPSHOT. Can some one help me , what to do ?
-
**Expected Behavior**
[RFC 9126](https://datatracker.ietf.org/doc/html/rfc9126) introduces pushed authorization requests (PAR) for OAuth. In essence, pushed authorization requests allow the client …
-
# Description
This is a full-stack issue, mobile and backend.
We need an AUTH between the Mobile app, Web, and Backend.
This can be done through OTP, JWT, Siwe message of an EVM wallet, or Sta…
-
**Expected Behavior**
The implementations of `OAuth2UserService` support the `application/jwt` content type when fetching the UserInfo resource.
Related Spec Info:
> If the UserInfo Response …
-
jwt token为自存储，token生成后一直到过期才能失效。
场景：用户登陆后，手工退出，页面导入到登录页，前端清空token，但实际上这个token还是有效，可直接请求后台。
优化方案：
token生成后临时存储在redis, 若用户退出，则清空redis。网关层可做redis的校验，若没有key，则直接认为失效。
-
https://github.com/spring-projects/spring-security-oauth/blob/2.0.9.RELEASE/spring-security-oauth2/src/main/java/org/springframework/security/oauth2/provider/token/DefaultTokenServices.java#L229
https…
-
When trying to test the /api/auth/signup end point using HTTPie I'm getting an error from the AuthController. I liked the idea of having the roles from your implementation, and omitting them works. Bu…