mraible
commented
6 years ago I did the following tutorial earlier this week and it worked fine. Are you doing something different?
https://developer.okta.com/blog/2017/11/20/add-sso-spring-boot-15-min https://developer.okta.com/blog/2017/11/20/add-sso-spring-boot-15-min
On Nov 22, 2017, at 6:47 PM, Josh Hardy notifications@github.com wrote:
I have followed the code example in the README and successfully setup the Authorization Code Flow. The user is redirected to the login screen hosted by Okta if a secured route is accessed. Once the user is authenticated through Okta, the user is redirected back to my app successfully.
The problem is, when I try and grab the Principal as defined in the controller example, the Principal is always null. Is there some OAuth Spring Security config that needs to be added??
POM/App info
Springboot 2.0.0.M3 okta-springboot starter 0.2.0 spring-security-oauth2 2.2.0.RELEASE Controller serving secured page
package com.readingmentor.pir.controller;
import java.security.Principal;
import org.springframework.stereotype.Controller; import org.springframework.web.bind.annotation.RequestMapping;
@Controller public class DashboardController {
@RequestMapping("/dashboard") public String dashboard(Principal principal) { // always null System.out.println("Principal " + principal.getName()); return "dashboard"; }
} application.yml
okta: oauth2: issuer: https://dev-315558.oktapreview.com/oauth2/default clientId: clientSecret: client: orgUrl: https://dev-315558.oktapreview.com token: *** __Security configuration
package com.readingmentor.pir.config;
import org.springframework.boot.autoconfigure.security.oauth2.client.EnableOAuth2Sso; import org.springframework.context.annotation.Configuration; import org.springframework.http.HttpMethod; import org.springframework.security.config.annotation.web.builders.HttpSecurity; import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
@Configuration @EnableOAuth2Sso public class SecurityConfig extends WebSecurityConfigurerAdapter {
@Override public void configure(HttpSecurity http) throws Exception { http.authorizeRequests() .antMatchers(HttpMethod.GET, "/api/programs/*", "/api/programs").permitAll() .antMatchers(HttpMethod.POST, "/api/users").permitAll() .antMatchers("/api/", "/dashboard").authenticated() .antMatchers("/").permitAll() .anyRequest().authenticated(); }
} — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/okta/okta-spring-boot/issues/31, or mute the thread https://github.com/notifications/unsubscribe-auth/AABF5HY_KHTH-R4zQzwwM4qLplHF667Hks5s5LKDgaJpZM4QoIZe.
Prophet32j
bsakweson
bdemers
I have followed the code example in the README and successfully setup the Authorization Code Flow. The user is redirected to the login screen hosted by Okta if a secured route is accessed. Once the user is authenticated through Okta, the user is redirected back to my app successfully.
The problem is, when I try and grab the Principal as defined in the controller example, the Principal is always null. Is there some OAuth Spring Security config that needs to be added??
POM/App info
Controller serving secured page
application.yml
__Security configuration