Rob Winch aac854453e

ServerBearerTokenAuthenticationConverter Handles Empty Tokens ...

Previously ServerBearerTokenAuthenticationConverter would throw an
IllegalArgumentException when the access token in a URI was empty String.
It also incorrectly provided HttpStatus.BAD_REQUEST for an empty String
access token in the headers.

This changes ServerBearerTokenAuthenticationConverter to consistently
throw a OAuth2AuthenticationException with an HttpStatus.UNAUTHORIZED

Fixes gh-7011

2019-06-28 06:48:46 -06:00

..

src

ServerBearerTokenAuthenticationConverter Handles Empty Tokens

2019-06-28 06:48:46 -06:00

spring-security-oauth2-resource-server.gradle

Add JwtReactiveAuthenticationManager

2018-07-30 11:39:28 -05:00