mirror of
https://github.com/spring-projects/spring-security.git
synced 2025-07-08 19:42:48 +00:00
Updated for Spring Security 5.1
parent
c98f891f88
commit
778da4de8e
@ -1,8 +1,8 @@
|
|||||||
The following matrix outlines all the OAuth 2.0 features implemented by the various projects within the Spring portfolio.
|
The following matrix outlines all the OAuth 2.0 features implemented by the various projects within the Spring portfolio.
|
||||||
The matrix may be used to determine which project(s) to use based on your OAuth 2.0 requirements.
|
The matrix may be used to determine which project(s) to use based on your OAuth 2.0 requirements.
|
||||||
|
|
||||||
NOTE: Spring Security 5.0 introduced new _Client_ support for the OAuth 2.0 Authorization Framework and OpenID Connect 1.0.
|
NOTE: Spring Security 5.0 introduced new _Client_ support for the OAuth 2.0 Authorization Framework and OpenID Connect 1.0. Spring Security 5.1 introduced new _Resource Server_ support as well as additional _Client_ support for different grant types.
|
||||||
The plan is to also provide support for _Resource Server_ and _Authorization Server_ in future releases.
|
The plan is to also provide support for _Authorization Server_ in future releases.
|
||||||
This matrix will be kept up-to-date as we complete new features.
|
This matrix will be kept up-to-date as we complete new features.
|
||||||
|
|
||||||
For additional information, please see the <<frequently-asked-questions,Frequently Asked Questions>>.
|
For additional information, please see the <<frequently-asked-questions,Frequently Asked Questions>>.
|
||||||
@ -14,25 +14,25 @@ For additional information, please see the <<frequently-asked-questions,Frequent
|
|||||||
[cols="<40,^15,^15,^15,^15",options="header"]
|
[cols="<40,^15,^15,^15,^15",options="header"]
|
||||||
|===
|
|===
|
||||||
|
|
|
|
||||||
| https://projects.spring.io/spring-security/[Spring Security^] (5.0+)
|
| https://projects.spring.io/spring-security/[Spring Security^] (5.1+)
|
||||||
| http://projects.spring.io/spring-security-oauth/[Spring Security OAuth^] (2.2+)
|
| http://projects.spring.io/spring-security-oauth/[Spring Security OAuth^] (2.2+)
|
||||||
| https://cloud.spring.io/spring-cloud-security/[Spring Cloud Security^] (1.2+)
|
| https://cloud.spring.io/spring-cloud-security/[Spring Cloud Security^] (1.2+)
|
||||||
| https://projects.spring.io/spring-boot/[Spring Boot OAuth2^] (1.5.x)
|
| https://projects.spring.io/spring-boot/[Spring Boot OAuth2^] (1.5.x)
|
||||||
|
|
||||||
| [red]#*_Authorization Grants_*# 4+|
|
| [red]#*_Authorization Grants_*# 4+|
|
||||||
| Authorization Code | | ✔ | |
|
| Authorization Code | ✔ | ✔ | |
|
||||||
| Implicit | | ✔ | |
|
| Implicit | ✔ | ✔ | |
|
||||||
| Resource Owner Password Credentials | | ✔ | |
|
| Resource Owner Password Credentials | | ✔ | |
|
||||||
| Client Credentials | | ✔ | |
|
| Client Credentials | ✔ | ✔ | |
|
||||||
| Refresh Token | | ✔ | |
|
| Refresh Token | ✔ | ✔ | |
|
||||||
|
|
||||||
| [red]#*_Client Authentication Methods_*# 4+|
|
| [red]#*_Client Authentication Methods_*# 4+|
|
||||||
| HTTP Basic | ✔ | ✔ | |
|
| HTTP Basic | ✔ | ✔ | |
|
||||||
| HTTP POST | ✔ | ✔ | |
|
| HTTP POST | ✔ | ✔ | |
|
||||||
|
|
||||||
| [red]#*_HTTP Client Support_*# 4+|
|
| [red]#*_HTTP Client Support_*# 4+|
|
||||||
| RestTemplate | | ✔ | |
|
| RestTemplate | partial | ✔ | |
|
||||||
| WebClient | | | |
|
| WebClient | partial | | |
|
||||||
|
|
||||||
| [red]#*_User Authentication_*# 4+|
|
| [red]#*_User Authentication_*# 4+|
|
||||||
| OAuth 2.0 Login (SSO) | ✔ | | | ✔
|
| OAuth 2.0 Login (SSO) | ✔ | | | ✔
|
||||||
@ -60,14 +60,14 @@ For additional information, please see the <<frequently-asked-questions,Frequent
|
|||||||
|
|
||||||
| [red]#*_Access Token Formats_*# 4+|
|
| [red]#*_Access Token Formats_*# 4+|
|
||||||
| Opaque | | ✔ | |
|
| Opaque | | ✔ | |
|
||||||
| JSON Web Token (JWT) | | ✔ | |
|
| JSON Web Token (JWT) | ✔ | ✔ | |
|
||||||
|
|
||||||
| [red]#*_Access Token Verification_*# 4+|
|
| [red]#*_Access Token Verification_*# 4+|
|
||||||
| Opaque (using Introspection Endpoint) | | ✔ | |
|
| Opaque (using Introspection Endpoint) | | ✔ | |
|
||||||
| JSON Web Signature (MAC) | | ✔ | |
|
| JSON Web Signature (MAC) | | ✔ | |
|
||||||
| JSON Web Signature (RSA) | | ✔ | |
|
| JSON Web Signature (RSA) | | ✔ | |
|
||||||
| JSON Web Signature (using JSON Web Key) | | ✔ | |
|
| JSON Web Signature (using JSON Web Key) | ✔ | ✔ | |
|
||||||
| Custom JWT Claims Set Verifier| | ✔ | |
|
| Custom JWT Claims Set Verifier | ✔ | ✔ | |
|
||||||
|===
|
|===
|
||||||
|
|
||||||
|
|
||||||
|
Loading…
x
Reference in New Issue
Block a user