liveBook · Manning

Oauth2Client

As explained in Spring Security in Action, Second Edition

oauth2Client is an HttpSecurity configuration method that enables an application to operate as an OAuth 2 client.

oauth2Client is an HttpSecurity configuration method that enables an application to operate as an OAuth 2 client. Calling oauth2Client(Customizer.withDefaults()) activates the client configuration; supporting registration details and a client manager still define how tokens are obtained. section 16.2

Minimal configuration

http.oauth2Client(Customizer.withDefaults()); ClientRegistration.withRegistrationId("1") .clientId("client") .clientSecret("secret") .authorizationGrantType(AuthorizationGrantType.CLIENT_CREDENTIALS) .tokenUri("http://localhost:7070/oauth2/token"); A /token endpoint can invoke the manager and return client.getAccessToken().getTokenValue().

How Spring Security in Action, Second Edition covers it

How deep it goes
Explains default activation, registration details, manager wiring, and token retrieval, but stops short of broader production architecture.
Examples
Uses a client-credentials registration, a /token controller endpoint, curl, and a returned access-token value.
What it assumes
Assumes basic Spring Security configuration and an authorization server with a client-credentials registration.
What you can do after
Build it from scratch by configuring oauth2Client, registering a client, wiring a manager, and requesting an access token.
How it connects
Connects HttpSecurity, ClientRegistrationRepository, OAuth2AuthorizedClientManager, and the client credentials grant.
Cover of Spring Security in Action, Second Edition
liveBookmanning.com
Read Spring Security in Action, Second Edition on liveBook Get the book at manning.com

Related concepts

This explainer was generated by Manning's knowledge graph from the text of Spring Security in Action, Second Edition. The section links point to the parts of the book it draws on.