diff --git a/config/src/main/java/org/springframework/security/config/annotation/web/configurers/oauth2/client/OAuth2LoginConfigurer.java b/config/src/main/java/org/springframework/security/config/annotation/web/configurers/oauth2/client/OAuth2LoginConfigurer.java index dcacd52df1..355e49670b 100644 --- a/config/src/main/java/org/springframework/security/config/annotation/web/configurers/oauth2/client/OAuth2LoginConfigurer.java +++ b/config/src/main/java/org/springframework/security/config/annotation/web/configurers/oauth2/client/OAuth2LoginConfigurer.java @@ -351,6 +351,8 @@ public final class OAuth2LoginConfigurer> public void init(B http) throws Exception { OAuth2LoginAuthenticationFilter authenticationFilter = new OAuth2LoginAuthenticationFilter( this.getClientRegistrationRepository(), this.getAuthorizedClientRepository(), this.loginProcessingUrl); + RequestMatcher processUri = RequestMatcherFactory.matcher(this.loginProcessingUrl); + authenticationFilter.setRequiresAuthenticationRequestMatcher(processUri); authenticationFilter.setSecurityContextHolderStrategy(getSecurityContextHolderStrategy()); this.setAuthenticationFilter(authenticationFilter); super.loginProcessingUrl(this.loginProcessingUrl); @@ -434,7 +436,8 @@ public final class OAuth2LoginConfigurer> http.addFilter(this.postProcess(authorizationRequestFilter)); OAuth2LoginAuthenticationFilter authenticationFilter = this.getAuthenticationFilter(); if (this.redirectionEndpointConfig.authorizationResponseBaseUri != null) { - authenticationFilter.setFilterProcessesUrl(this.redirectionEndpointConfig.authorizationResponseBaseUri); + authenticationFilter.setRequiresAuthenticationRequestMatcher( + RequestMatcherFactory.matcher(this.redirectionEndpointConfig.authorizationResponseBaseUri)); } if (this.authorizationEndpointConfig.authorizationRequestRepository != null) { authenticationFilter