Cwikius-Spring/spring-security
1
0
Fork 0
mirror of synced 2026-08-05 09:47:05 +00:00
Code Issues Packages Projects Releases Wiki Activity

Document Jwt Client Authentication support

Browse Source 
Closes gh-9578
This commit is contained in:
Joe Grandja
2021-05-14 22:04:28 -04:00
parent 85fb9c09a5
commit e51ca79954
4 changed files with 129 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
config/src/main/resources/org/springframework/security/config/spring-security-5.5.rnc
+2 -2
View File
@@ -526,8 +526,8 @@ client-registration.attlist &=
## The client secret.
attribute client-secret {xsd:token}?
client-registration.attlist &=
## The method used to authenticate the client with the provider. The supported values are client_secret_basic, client_secret_post and none (public clients).
attribute client-authentication-method {"client_secret_basic" | "basic" | "client_secret_post" | "post" | "none"}?
## The method used to authenticate the client with the provider. The supported values are client_secret_basic, client_secret_post, private_key_jwt, client_secret_jwt and none (public clients).
attribute client-authentication-method {"client_secret_basic" | "basic" | "client_secret_post" | "post" | "private_key_jwt" | "client_secret_jwt" | "none"}?
client-registration.attlist &=
## The OAuth 2.0 Authorization Framework defines four Authorization Grant types. The supported values are authorization_code, client_credentials, password, implicit, as well as, extension grant type urn:ietf:params:oauth:grant-type:jwt-bearer.
attribute authorization-grant-type {"authorization_code" | "client_credentials" | "password" | "implicit" | "urn:ietf:params:oauth:grant-type:jwt-bearer"}?
config/src/main/resources/org/springframework/security/config/spring-security-5.5.xsd
+4 -1
View File
@@ -1657,7 +1657,8 @@
<xs:attribute name="client-authentication-method">
<xs:annotation>
<xs:documentation>The method used to authenticate the client with the provider. The supported values are
client_secret_basic, client_secret_post and none (public clients).
client_secret_basic, client_secret_post, private_key_jwt, client_secret_jwt and none
(public clients).
</xs:documentation>
</xs:annotation>
<xs:simpleType>
@@ -1666,6 +1667,8 @@
<xs:enumeration value="basic"/>
<xs:enumeration value="client_secret_post"/>
<xs:enumeration value="post"/>
<xs:enumeration value="private_key_jwt"/>
<xs:enumeration value="client_secret_jwt"/>
<xs:enumeration value="none"/>
</xs:restriction>
</xs:simpleType>