search

spring-attic / spring-cloud-security

Security concerns for distributed applications implemented in Spring
Apache License 2.0
532 stars 244 forks source link

Use ClientId and ClientSecret for token refresh #241

Closed rcbandit111 closed 3 years ago

rcbandit111 commented 4 years ago

I want to implement OAuth2 token refresh without basicAuth authentication using spring-cloud-starter-oauth2.

I'm forced to use basicAuth for token refresh. If I remove it I get error:

"error_description": "There is no client authentication. Try adding an appropriate authentication filter."

Is there some way to avoid this authentication for refresh token? For example is it possible to use ClientId and ClientSecret?

Are there any possible options to solve this issue? I'm really stuck with this issue.

ryanjbaxter commented 3 years ago

Can you explain what this has to do with Spring Cloud Security? Maybe if you provided a sample it would help.

spring-cloud-issues commented 3 years ago

If you would like us to look at this issue, please provide the requested information. If the information is not provided within the next 7 days this issue will be closed.

spring-cloud-issues commented 3 years ago

Closing due to lack of requested feedback. If you would like us to look at this issue, please provide the requested information and we will re-open the issue.