-
Notifications
You must be signed in to change notification settings - Fork 6k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Allow customization of redirect strategy #11387
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thank you for the PR @igorbolic
This looks like it will work for reactive support, but we need to ensure that we have consistency with the servlet support as well.
Can you please:
- Add Support for OAuth2AuthorizationRequestRedirectFilter
- Ensure to add Java Configuration Support
- Ensure to add XML configuration support
@rwinch I've pushed the requested changes. Still, there are tests (unrelated to this PR) that are failing, but I've created PR #11462 to address them. I can rebase on top of changes in PR #11462 if/once they are merged to the main branch, just so that all tests pass in green with this PR. |
54f034c
to
feb47b2
Compare
The default redirect strategy will provide authorization redirect URI within HTTP 302 response Location header. Allowing the configuration of custom redirect strategy will provide an option for the clients to obtain the authorization URI from e.g. HTTP response body as JSON payload, without a need to handle automatic redirection initiated by the HTTP Location header. Closes spring-projectsgh-11373
Thank you for the PR @igorbolic! This has been merged into 5.8.x via efaee4e and main via 2e66b9f |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Looks good! Thank you @igorbolic
The default redirect strategy will provide authorization redirect
URI within HTTP 302 response Location header.
Allowing the configuration of custom redirect strategy will provide
an option for the clients to obtain the authorization URI from e.g.
HTTP response body as JSON payload, without a need to handle
automatic redirection initiated by the HTTP Location header.
Closes gh-11373