spring-projects / spring-authorization-server

Spring Authorization Server
https://spring.io/projects/spring-authorization-server
Apache License 2.0
4.84k stars 1.27k forks source link

Login screen is displayed after upgrade spring authorization server to latest #1607

Closed Sundar-sabapathi closed 5 months ago

Sundar-sabapathi commented 5 months ago

Hi @all, I am using Spring boot with spring security OAuth2ResourceServer to authenticate my end points . After upgrade spring boot, spring security authorization server to latest version by default spring security redirects to login page.

@Bean
    public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception
    {
        LOGGER.info("Configuring web security...");
        http
                .csrf(AbstractHttpConfigurer::disable)
                .logout(AbstractHttpConfigurer::disable)
                .headers(headers -> headers
                        .frameOptions(HeadersConfigurer.FrameOptionsConfig::sameOrigin)
                        .xssProtection(xXssConfig -> xXssConfig.headerValue(
                                XXssProtectionHeaderWriter.HeaderValue.ENABLED_MODE_BLOCK))
                        .referrerPolicy(referrerPolicy ->
                                referrerPolicy.policy(ReferrerPolicyHeaderWriter.ReferrerPolicy.STRICT_ORIGIN))
                        .permissionsPolicy(permissionsPolicy -> permissionsPolicy.policy("geolocation=()")));

                .oauth2ResourceServer(oauth2 -> oauth2.jwt(Customizer.withDefaults())    

                .authorizeHttpRequests(authorizeHttpRequest -> authorizeHttpRequest.
                       requestMatchers(new AntPathRequestMatcher("/api/**)).authenticated()
                .anyRequest().permitAll());
        return build(http);
    }

If I hit the base url http://localhost:8080 it automatically redirects to spring security login page. Before upgrade my application login page will be displayed if I hit the base url. Please help me to give a suggestion to resolve this issue.