Class ImplicitGrantConfigurer<B extends HttpSecurityBuilder<B>>
- java.lang.Object
-
- org.springframework.security.config.annotation.SecurityConfigurerAdapter<org.springframework.security.web.DefaultSecurityFilterChain,B>
-
- org.springframework.security.config.annotation.web.configurers.AbstractHttpConfigurer<ImplicitGrantConfigurer<B>,B>
-
- org.springframework.security.config.annotation.web.configurers.oauth2.client.ImplicitGrantConfigurer<B>
-
- All Implemented Interfaces:
SecurityConfigurer<org.springframework.security.web.DefaultSecurityFilterChain,B>
@Deprecated public final class ImplicitGrantConfigurer<B extends HttpSecurityBuilder<B>> extends AbstractHttpConfigurer<ImplicitGrantConfigurer<B>,B>
Deprecated.It is not recommended to use the implicit flow due to the inherent risks of returning access tokens in an HTTP redirect without any confirmation that it has been received by the client. See reference OAuth 2.0 Implicit Grant.AnAbstractHttpConfigurerfor the OAuth 2.0 Implicit Grant type.Security Filters
The followingFilter's are populated:OAuth2AuthorizationRequestRedirectFilter
Shared Objects Created
The following shared objects are populated:ClientRegistrationRepository(required)
Shared Objects Used
The following shared objects are used:ClientRegistrationRepository
- Since:
- 5.0
- See Also:
OAuth2AuthorizationRequestRedirectFilter,ClientRegistrationRepository
-
-
Constructor Summary
Constructors Constructor Description ImplicitGrantConfigurer()Deprecated.
-
Method Summary
All Methods Instance Methods Concrete Methods Deprecated Methods Modifier and Type Method Description ImplicitGrantConfigurer<B>authorizationRequestBaseUri(java.lang.String authorizationRequestBaseUri)Deprecated.Sets the baseURIused for authorization requests.ImplicitGrantConfigurer<B>clientRegistrationRepository(org.springframework.security.oauth2.client.registration.ClientRegistrationRepository clientRegistrationRepository)Deprecated.Sets the repository of client registrations.voidconfigure(B http)Deprecated.Configure theSecurityBuilderby setting the necessary properties on theSecurityBuilder.-
Methods inherited from class org.springframework.security.config.annotation.web.configurers.AbstractHttpConfigurer
disable, withObjectPostProcessor
-
Methods inherited from class org.springframework.security.config.annotation.SecurityConfigurerAdapter
addObjectPostProcessor, and, getBuilder, init, postProcess, setBuilder
-
-
-
-
Method Detail
-
authorizationRequestBaseUri
public ImplicitGrantConfigurer<B> authorizationRequestBaseUri(java.lang.String authorizationRequestBaseUri)
Deprecated.Sets the baseURIused for authorization requests.- Parameters:
authorizationRequestBaseUri- the baseURIused for authorization requests- Returns:
- the
ImplicitGrantConfigurerfor further configuration
-
clientRegistrationRepository
public ImplicitGrantConfigurer<B> clientRegistrationRepository(org.springframework.security.oauth2.client.registration.ClientRegistrationRepository clientRegistrationRepository)
Deprecated.Sets the repository of client registrations.- Parameters:
clientRegistrationRepository- the repository of client registrations- Returns:
- the
ImplicitGrantConfigurerfor further configuration
-
configure
public void configure(B http)
Deprecated.Description copied from interface:SecurityConfigurerConfigure theSecurityBuilderby setting the necessary properties on theSecurityBuilder.- Specified by:
configurein interfaceSecurityConfigurer<org.springframework.security.web.DefaultSecurityFilterChain,B extends HttpSecurityBuilder<B>>- Overrides:
configurein classSecurityConfigurerAdapter<org.springframework.security.web.DefaultSecurityFilterChain,B extends HttpSecurityBuilder<B>>
-
-