Expose ID Token JwtDecoderFactory
See original GitHub issueDefaultJwtDecoderFactory
in OidcAuthorizationCodeAuthenticationProvider
and OidcAuthorizationCodeReactiveAuthenticationManager
is responsible for providing the JwtDecoder
used for ID Token verification. Both are declared as private static
.
The user may need to customize the JwtDecoder
in certain scenarios, for example, configuring a clock skew (#5839). Given this, we should extract both DefaultJwtDecoderFactory
to allow for reuse and customization/configuration.
Issue Analytics
- State:
- Created 5 years ago
- Comments:13 (13 by maintainers)
Top Results From Across the Web
12. OAuth2 - Spring
The ID Token is represented as a JSON Web Token (JWT) and MUST be signed using JSON Web Signature (JWS).
Read more >In OpenID Connect, is it okay to pass an id token instead of an ...
But when you share ID Token with a third party, you expose those sensitive information. It could be a crime if there are...
Read more >spring-projects/spring-security 5.2.0.M1 on GitHub
... Extract the ID Token JwtDecoderFactory to enable user customization #6415; Expose ID Token JwtDecoderFactory #6379; ID Token validation supports clock ...
Read more >What are OIDC ID tokens? - Cloudentity
OIDC is a simple identity layer built on top of OAuth 2.0 that provides authentication and identity assertion. The ID token is a...
Read more >org.springframework.security.oauth2.core.oidc.OidcIdToken ...
idToken (). private static OidcIdToken idToken() { Map<String, Object> claims = new HashMap<>(); claims.put(IdTokenClaimNames.
Read more >
Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free
Top Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
Ok Joe, thank you for your help… I committed additional changes. I’m working on a test for the customization
it totally makes sense, thanks… then I should add the tests and open the PR, thanks