Cwikius-Spring/spring-security
1
0
Fork 0
mirror of https://github.com/spring-projects/spring-security.git synced 2025-05-31 09:12:14 +00:00
Code Issues Packages Projects Releases Wiki Activity

Deprecate OAuth2AuthorizationResponseType.TOKEN

Browse Source 
Closes gh-9582
This commit is contained in:
Joe Grandja 2021-04-09 07:46:21 -04:00
parent eff4cdc924
commit dca7e03b91
1 changed files with 10 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
oauth2/oauth2-core/src/main/java/org/springframework/security/oauth2/core/endpoint/OAuth2AuthorizationResponseType.java
View File

@ -1,5 +1,5 @@
/* /*
* Copyright 2002-2017 the original author or authors. * Copyright 2002-2021 the original author or authors.
* *
* Licensed under the Apache License, Version 2.0 (the "License"); * Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License. * you may not use this file except in compliance with the License.
@ -43,6 +43,15 @@ public final class OAuth2AuthorizationResponseType implements Serializable {
public static final OAuth2AuthorizationResponseType CODE = new OAuth2AuthorizationResponseType("code"); public static final OAuth2AuthorizationResponseType CODE = new OAuth2AuthorizationResponseType("code");
/**
* It is not recommended to use the implicit flow due to the inherent risks of
* returning access tokens in an HTTP redirect without any confirmation that it has
* been received by the client.
*
* @see <a target="_blank" href="https://oauth.net/2/grant-types/implicit/">OAuth 2.0
* Implicit Grant</a>
*/
@Deprecated
public static final OAuth2AuthorizationResponseType TOKEN = new OAuth2AuthorizationResponseType("token"); public static final OAuth2AuthorizationResponseType TOKEN = new OAuth2AuthorizationResponseType("token");
private final String value; private final String value;