Cwikius-Spring/spring-security
1
0
Fork 0
mirror of https://github.com/spring-projects/spring-security.git synced 2025-07-23 18:53:29 +00:00
Code Issues Packages Projects Releases Wiki Activity
spring-security/oauth2/oauth2-client
History
Daniel Furtlehner 32ce94d2dd Validate ID Token Issuer 
When the issuer is set in the provider metadata, we validate the iss
field of the ID Token against it.

The OpenID Connect Specification says this must always be validated.
But this would be a breaking change for applications configured other
than with ClientRegistrations.fromOidcIssuerLocation(issuer). This will
be done later with #8326

Fixes gh-8321
2020-04-21 20:30:01 -04:00
..
src
Validate ID Token Issuer
2020-04-21 20:30:01 -04:00
spring-security-oauth2-client.gradle
Add JDBC implementation of OAuth2AuthorizedClientService
2020-02-13 12:17:29 -05:00