6db58cbf8a
Before this commit, the DefaultBearerTokenResolver unconditionally resolved the request parameters to check whether multiple tokens are present in the request and reject those requests as invalid. This commit changes this behaviour to resolve the request parameters only if parameter token is supported for the specific request according to spec (RFC 6750). Closes gh-10326 |
||
---|---|---|
.. | ||
src | ||
spring-security-oauth2-resource-server.gradle |