Resource Server (Java) fails with missing bean org.springframework.security.oauth2.jwt.JwtDecoder
See original GitHub issueif
okta:
oauth2:
issuer: https://dev-xxxx.okta.com/oauth2/default
is not defined in application.yml (or via mvn -Dokta.oauth2.issuer=https://{yourOktaDomain}/oauth2/default)
a cryptic error message is generated. Can you enhance to produce a better message?
This is the error that is generated:
Method springSecurityFilterChain in org.springframework.security.config.annotation.web.configuration.WebSecurityConfiguration required a bean of type ‘org.springframework.security.oauth2.jwt.JwtDecoder’ that could not be found.
Issue Analytics
- State:
- Created 3 years ago
- Reactions:1
- Comments:9 (5 by maintainers)
Top Results From Across the Web
JwtDecoder bean is not injected automatically while setting a ...
I found out that there was a problem with the gradle config of project I am working on (updated the question). The spring...
Read more >OAuth 2.0 Resource Server JWT :: Spring Security
Resource Server uses JwtTimestampValidator to verify a token's validity window, and it can be configured with a clockSkew to alleviate the above problem:...
Read more >spring-projects/spring-security - Gitter
but fails because of No qualifying bean of type 'org.springframework.security.oauth2.jwt.JwtDecoder' available . The bean normally gets populated by
Read more >JWS + JWK in a Spring Security OAuth2 Application - Baeldung
For instance, a Resource Server uses the kid (Key Id) field present in the JWT to find the correct key in the JWK...
Read more >How to use organization level authorization server in OKTA ...
beans.BeanInstantiationException: Failed to instantiate [org.springframework.security.oauth2.jwt.JwtDecoder]: Factory method 'jwtDecoder' threw ...
Read more >
Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free
Top Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
Hi @woldie!
This should be fixed in the next release. We added tests (and fixes) to make sure that both the
okta.oauth2.*
and standardspring.security.oauth2.*
properties work. (Note: theokta.oauth2
properties are just alias to the Spring props)cc: @arvindkrishnakumar-okta
lovely, thank you!
On Mon, Jun 7, 2021 at 10:17 AM Brian Demers @.***> wrote: