ch4mpy / spring-addons

Ease spring OAuth2 resource-servers configuration and testing
Apache License 2.0
521 stars 84 forks source link

`spring-security-oauth2-resource-server`, `spring-security-oauth2-client` and `spring-webflux` should be `optional` dependencies #192

Closed ch4mpy closed 5 months ago

ch4mpy commented 5 months ago

Describe the bug As pointed out by @rgambelli in this question, applications always are detected as being resource servers by spring-addons-starter-oidc.

This is because spring-security-oauth2-resource-server always is on the classpath when spring-addons-starter-oidc is.

Expected behavior spring-security-oauth2-resource-server (as well as spring-security-oauth2-client and spring-webflux) should be on the classpath only if the app using spring-addons-starter-oidc asks for it

ch4mpy commented 5 months ago

Fixed in 7.6.5