spring-projects / spring-authorization-server

Spring Authorization Server
https://spring.io/projects/spring-authorization-server
Apache License 2.0
4.88k stars 1.3k forks source link

OAuth2TokenIntrospectionAuthenticationProvider doesn't find RegisteredClient #1796

Closed pstetsuk closed 3 weeks ago

pstetsuk commented 3 weeks ago

OAuth2TokenIntrospectionAuthenticationProvider doesn't find RegisteredClient because used wrong parameter when call RegisteredClientRepository. In the code it looks like:

        RegisteredClient authorizedClient = this.registeredClientRepository
            .findById(authorization.getRegisteredClientId());

Need to use findByClientId() instead