liveBook · Manning

RegisteredClient

As explained in Spring Security in Action, Second Edition

RegisteredClient is a Spring Security Authorization Server object that describes a client known to an authorization server.

RegisteredClient describes a client known to an authorization server. A RegisteredClientRepository manages these objects, including client credentials and registration details. section 14.1

Registering a client

Create a RegisteredClient with a generated ID, client credentials, CLIENT_SECRET_BASIC authentication, authorization-code support, a redirect URI, and the OPENID scope; return it through a RegisteredClientRepository bean.

How Spring Security in Action, Second Edition covers it

How deep it goes
Defines client identity, authentication, grants, redirect URIs, and scopes through a Java builder configuration.
Examples
Uses an in-memory repository containing a client named client with a secret, authorization-code grant, redirect URI, and OPENID scope.
What it assumes
Assumes standard Spring configuration classes and authorization-server dependencies.
What you can do after
Build it from scratch by configuring a RegisteredClient bean and exposing it through RegisteredClientRepository.
How it connects
Connects RegisteredClientRepository with client authentication, authorization grant types, redirect URIs, and OpenID Connect scopes.

Related concepts

This explainer was generated by Manning's knowledge graph from the text of Spring Security in Action, Second Edition. The section links point to the parts of the book it draws on.