parent
a44d07ecf4
commit
1e1b8ab3e7
|
@ -0,0 +1,34 @@
|
|||
= Access Token
|
||||
|
||||
Spring Security's OAuth Support allows obtaining an access token without authenticating.
|
||||
A basic configuration with Spring Boot can be seen below:
|
||||
|
||||
[source,yml]
|
||||
----
|
||||
spring:
|
||||
security:
|
||||
oauth2:
|
||||
client:
|
||||
registration:
|
||||
github:
|
||||
client-id: replace-with-client-id
|
||||
client-secret: replace-with-client-secret
|
||||
scopes: read:user,public_repo
|
||||
----
|
||||
|
||||
You will need to replace the `client-id` and `client-secret` with values registered with GitHub.
|
||||
|
||||
The next step is to instruct Spring Security that you wish to act as an OAuth2 Client so that you can obtain an access token.
|
||||
|
||||
[source,java]
|
||||
----
|
||||
@Bean
|
||||
SecurityWebFilterChain configure(ServerHttpSecurity http) throws Exception {
|
||||
http
|
||||
// ...
|
||||
.oauth2Client();
|
||||
return http.build();
|
||||
}
|
||||
----
|
||||
|
||||
You can now leverage Spring Security's <<webclient>> support to obtain and use the access token.
|
|
@ -3,3 +3,5 @@
|
|||
Spring Security provides OAuth2 and WebFlux integration for reactive applications.
|
||||
|
||||
include::login.adoc[leveloffset+=1]
|
||||
|
||||
include::access-token.adoc[leveloffset+=1]
|
||||
|
|
Loading…
Reference in New Issue