Package com.c4_soft.springaddons.security.oauth2.config.synchronised
package com.c4_soft.springaddons.security.oauth2.config.synchronised
-
ClassesClassDescriptionThis provides with a client side implementation of the OIDC Back-Channel Logout specification.Handles a POST request containing a JWT logout token provided as application/x-www-form-urlencoded as specified in Back-Channel Logout specification.Support two features: usage of
SpringAddonsOAuth2ClientProperties#client-uriin post-login redirection URI defining authorization request additional parameters from properties (like audience for Auth0)Work around the single tenancy nature ofOAuth2AuthenticationTokenandInMemoryReactiveClientRegistrationRepository: if a user authenticates sequentially on several OP, his OAuth2AuthenticationToken will contain anOAuth2Usercorresponding only to the last OP he authenticated with.The following@ConditionalOnMissingBeansare auto-configured springAddonsClientFilterChain: aSecurityFilterChain.Provide with RP-Initiated Logout for authorization-servers fully compliant with OIDC standard as well as those "almost" implementing the spec.