aefd2d497c
Previously JwtClaimValidator returned the invalid_request error on claim validation failure. But validators have to return invalid_token errors on failure according to: https://datatracker.ietf.org/doc/html/rfc6750#section-3.1. Also see gh-10337 Closes gh-10337 |
||
---|---|---|
.. | ||
main/java/org/springframework/security/oauth2 | ||
test/java/org/springframework/security/oauth2 |