Closed TheNullablePrototype closed 6 months ago
@TheNullablePrototype thks for reporting.
Your analysis about the problem cause is the right one: JWTClaimsSetAuthenticationManager
should use Optional#ofNullable
(and not Optional#of
) for all 3 arguments when calling the JWT-decoder factory.
This went under the radar because this is hard to spot in "unit" tests (authorization server is not called) and I "smoke" tested the last release with Auth0 (for which the audience
is always provided)...
Should be fixed with the just released 7.5.2
. Please confirm and close.
The problem is solved, thank you!
Describe the bug I am using the BFF tutorial to develop a SPA Vue.js + Spring Boot. Today I updated
spring-addons-starter-oidc
from version7.3.5
to7.5.+
, after restarting all services (REST and Gateway), I found that I get an error message for allpermit-all
requests after keycloak(docker 23.0.4) authorization (without authorization all requests are 200). In the rest service logs (not gateway) I found the following error:After studying the source code of the place where the error occurs a little, I came to the conclusion that the aud parameter is expected(
![image](https://github.com/ch4mpy/spring-addons/assets/19995957/935dbd11-7761-4162-96b1-629922bb9f64)
requireNonNull
):First of all, I studied the current BFF template to find the difference, maybe I missed something when updating, but I couldn't find anything.
REST Service
build.gradle
:REST Service
application.yaml
:Expected behavior Due to the fact that I did not find any difference in the current version of the BFF tutorial and my current version of the project, I expected everything to work as needed.
Additional context
![image](https://github.com/ch4mpy/spring-addons/assets/19995957/c03172c3-52c5-49e6-826e-a7ff56ab845d)