Cwikius-Spring/spring-security
1
0
Fork 0
mirror of synced 2026-08-05 17:57:15 +00:00
Code Issues Packages Projects Releases Wiki Activity

Document jwt-bearer authorization grant

Browse Source 
Closes gh-9580
This commit is contained in:
Joe Grandja
2021-05-14 10:17:20 -04:00
parent f425c96f06
commit f874a12ddb
4 changed files with 227 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
config/src/main/resources/org/springframework/security/config/spring-security-5.5.rnc
+2 -2
View File
@@ -529,8 +529,8 @@ client-registration.attlist &=
## The method used to authenticate the client with the provider. The supported values are client_secret_basic, client_secret_post and none (public clients).
attribute client-authentication-method {"client_secret_basic" | "basic" | "client_secret_post" | "post" | "none"}?
client-registration.attlist &=
## The OAuth 2.0 Authorization Framework defines four Authorization Grant types. The supported values are authorization_code, client_credentials, password and implicit.
attribute authorization-grant-type {"authorization_code" | "client_credentials" | "password" | "implicit"}?
## The OAuth 2.0 Authorization Framework defines four Authorization Grant types. The supported values are authorization_code, client_credentials, password, implicit, as well as, extension grant type urn:ietf:params:oauth:grant-type:jwt-bearer.
attribute authorization-grant-type {"authorization_code" | "client_credentials" | "password" | "implicit" | "urn:ietf:params:oauth:grant-type:jwt-bearer"}?
client-registration.attlist &=
## The client’s registered redirect URI that the Authorization Server redirects the end-user’s user-agent to after the end-user has authenticated and authorized access to the client.
attribute redirect-uri {xsd:token}?
config/src/main/resources/org/springframework/security/config/spring-security-5.5.xsd
+3 -1
View File
@@ -1673,7 +1673,8 @@
<xs:attribute name="authorization-grant-type">
<xs:annotation>
<xs:documentation>The OAuth 2.0 Authorization Framework defines four Authorization Grant types. The
supported values are authorization_code, client_credentials, password and implicit.
supported values are authorization_code, client_credentials, password, implicit, as well
as, extension grant type urn:ietf:params:oauth:grant-type:jwt-bearer.
</xs:documentation>
</xs:annotation>
<xs:simpleType>
@@ -1682,6 +1683,7 @@
<xs:enumeration value="client_credentials"/>
<xs:enumeration value="password"/>
<xs:enumeration value="implicit"/>
<xs:enumeration value="urn:ietf:params:oauth:grant-type:jwt-bearer"/>
</xs:restriction>
</xs:simpleType>
</xs:attribute>