github
/
OpenID-Connect-Java-Spring-Server
mirror of https://github.com/mitreid-connect/OpenID-Connect-Java-Spring-Server
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

This commit fixes the infinite redirect, somewhat. See updated issue #8.

pull/59/head
Amanda Anganes 2012-04-11 15:55:19 -04:00
parent 17f6e2a2fb
commit 2fc4ce177c
3 changed files with 6 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
openid-connect-server/src/main/java/org/mitre/oauth2/web/OAuthConfirmationController.java
View File

@ -34,7 +34,7 @@ public class OAuthConfirmationController {
this.clientService = clientService;
}
@PreAuthorize("hasRole('ROLE_USER')")
//@PreAuthorize("hasRole('ROLE_USER')")
@RequestMapping("/oauth/confirm_access")
public ModelAndView confimAccess(@ModelAttribute AuthorizationRequest clientAuth,
ModelAndView modelAndView) {

4
openid-connect-server/src/main/webapp/WEB-INF/spring/appServlet/servlet-context.xml
View File

@ -54,7 +54,9 @@
<oauth:authorization-server client-details-service-ref="defaultOAuth2ClientDetailsEntityService"
token-services-ref="defaultOAuth2ProviderTokenService" token-granter-ref="connectAuthCodeTokenGranter"
user-approval-handler-ref="userApprovalHandler"
authorization-endpoint-url="/openidconnect/auth" token-endpoint-url="/openidconnect/token">
authorization-endpoint-url="/openidconnect/auth" token-endpoint-url="/openidconnect/token"
user-approval-page="redirect:/oauth/confirm_access"
>
<oauth:authorization-code authorization-code-services-ref="authCodeServices" />
</oauth:authorization-server>

3
openid-connect-server/src/main/webapp/WEB-INF/spring/application-context.xml
View File

@ -23,7 +23,8 @@
<security:global-method-security pre-post-annotations="enabled" proxy-target-class="true" authentication-manager-ref="springSecurityAuthenticationManager"/>
<http pattern="/oauth/token" create-session="stateless" authentication-manager-ref="clientAuthenticationManager"
<!-- 4/11 AANGANES trying:remove "create-session="stateless"" from below statement -->
<http pattern="/oauth/token" authentication-manager-ref="clientAuthenticationManager"
xmlns="http://www.springframework.org/schema/security">
<intercept-url pattern="/oauth/token" access="IS_AUTHENTICATED_FULLY" />
<anonymous enabled="false" />