OAuth 2.1 is an in-progress effort to consolidate and simplify the most commonly used features of OAuth 2.0. Use this tag for questions relating to the draft versions of OAuth 2.1.
Useful Links:
Questions tagged [oauth-2.1]
8 questions
1
vote
1 answer
What are the differences between OAuth 2.0 and 2.1?
I was just looking at Spring Authorization Server and noticed that it mentions OAuth 2.1.
What are the differences between OAuth 2.0 and 2.1?
Matt Ke
- 3,599
- 12
- 30
- 49
0
votes
1 answer
How can I authenticate a user without using the password grant_type in an OAuth flow?
As I read OAuth 2.0 recommends against using the password grant type and it is being removed in the OAuth 2.1 update. But what is the proper solution then when you have a machine-to-machine communication channel?
In my case I have a couple of…
Jules
- 7,148
- 6
- 26
- 50
0
votes
0 answers
spring cloud gateway as oauth2 client and react app behind it getting 404 NOT FOUND
i have an React App and Spring cloud gateway as oauth2 client and Spring authorization server as OAuth2 server , so wanna put my react app behind the gateway (BFF)
this is my gateway routes :
spring:
cloud:
gateway:
default-filters:
…
Moolerian
- 534
- 6
- 18
0
votes
2 answers
Spring Auth Server doesn't authorize HTTP requests to secured endpoints by the passed Bearer token
The key point
I am developing an application in Spring Boot 3.1.0 using the Spring Authorization Server to implement an OAuth 2.1 server for Auth Code Flow with PKCE.
The OAuth works perfectly, but as soon as I continued to work on the service API…
SoKnight
- 33
- 7
0
votes
2 answers
How to get scope and roles in Oauth2/2.1 spring boot resource server?
How to get scope and roles in Oauth2/2.1 spring boot resource server?
Authentication authentication = getAuthentication();
System.out.println(authentication.getAuthorities());
Authorities returns only scope.
Here is my token introspect
{
…
Thirumal
- 8,280
- 11
- 53
- 103
0
votes
1 answer
How to revoke oauth2.1 token in spring boot new authorization server?
How to revoke the oAuth2 token in the spring boot new authorization server?
Also, where can we find all the endpoints of the authorization server?
https://github.com/spring-projects/spring-authorization-server
Thirumal
- 8,280
- 11
- 53
- 103
0
votes
1 answer
Authenticate a first-party app using Spring Authorization Server
I am building a first party mobile application that authenticates via a Spring Boot backend server (acting as the authentication and the resource server). I planned to use Spring Authorization Server to handle logging into the mobile application via…
bcode
- 11
- 1
0
votes
1 answer
How to implement custom 'OAuth2TokenIntrospectionEndpointFilter' in Spring Aauthorization server 1.0.0?
I have a default Spring authorization Server implementation. i want to modify it as per my project requirements.
I want to implement customized introspection endpoint in new spring authorization server.
I will be having different kinds of tokens,…
Vinayak Pattar
- 21
- 4