From f556c0bad782fb4641eac7a0cc1cf98c80fc168c Mon Sep 17 00:00:00 2001 From: Justin Richer Date: Mon, 15 Jul 2013 06:32:16 -0700 Subject: [PATCH] Updated Client configuration (markdown) --- Client-configuration.md | 82 +++++++++++++++++++++++++++++++++++++++++ 1 file changed, 82 insertions(+) diff --git a/Client-configuration.md b/Client-configuration.md index 1296a55..d95a3d5 100644 --- a/Client-configuration.md +++ b/Client-configuration.md @@ -191,6 +191,28 @@ Dynamically discovers server information for an issuer based on the [OpenID Conn Server information is stored in an in-memory cache after discovery. +### Hybrid Server Configuration + +Combines a static configuration service with a dynamically discovered one in one bean. Checks the static configuration first, then performs dynamic discovery. The `servers` property passes through to the static configuration service. + +``` + + + + + + + + + + + + + + + +``` + ## Client Configuration The client must know certain things like its `client_id` and `client_secret` in order to request tokens. These are likely to vary from issuer to issuer, so the client configuration objects are indexed by the server configuration object in this service. @@ -272,6 +294,66 @@ This service has a `registeredClientService` property which optionally allows fo It would be greatly preferable for a client to have its own implementation of the `RegisteredClientService` interface to store the client registration information in a secure location, such a the client application's database store. +### Hybrid Client Configuration + +Combines a static client configuration service with a dynamically registered one. Checks the static configuration first, and if that fails, invokes the dynamic registration process. The `clients` property passes through to the static service and the `template` and `registeredClientService` properties pass through to the dynamic service underneath. + +``` + + + + + + + + + + openid + email + address + profile + phone + + + + + + http://localhost:8080/simple-web-app/openid_connect_login + + + + + + + + + + + + openid + email + address + profile + phone + + + + + + http://localhost:8080/simple-web-app/openid_connect_login + + + + + + + + + + +``` + + ## Authorization Request URL Builder ### Plain Authorization Request