Releases: patternhelloworld/spring-oauth2-easyplus
Releases · patternhelloworld/spring-oauth2-easyplus
Stabilize App-Token based Module
- Leave warning logs for the function 'findSafelyByPrincipalNameAndClientIdAndAppToken'
- Conditional 'No app-token module'
- Fix minor bugs
v3.0.1
- Emergent fixes on the new v3
The first release for v3
- Now follows the DB tables from Spring Authorization Server.
- DB tables from Spring Security 5 have been removed.
The latest Spring Boot version applied
- v3.3.2
- Another conditional bean to handle 'HashCheckService'
- and others...
Make Authorization(=Access Denied) Exceptions clear and add test codes for that
"Customizable" settings
-
Insert your code when events happen such as tokens created
SecurityPointCut- See the source code in
client.config.securityimpl.aop
-
Register error user messages as desired
ISecurityUserExceptionMessageService- See the source code in
client.config.securityimpl.message
-
Customize the whole error payload as desired for all cases
- What is "all cases"?
- Authorization Server ("/oauth2/token", "/api/v1/traditional-oauth/token") and Resource Server (Bearer token inspection : 401, Permission : 403)
- Customize errors of the following cases
- Login (/oauth2/token) :
client.config.securityimpl.response.CustomAuthenticationFailureHandlerImpl - Login (/api/v1/traditional-oauth/token) :
client.config.response.error.GlobalExceptionHandler.authenticationException("/api/v1/traditional-oauth/token", Resource Server (Bearer token inspection)) - Resource Server (Bearer token expired or with a wrong value, 401) :
client.config.securityimpl.response.CustomAuthenticationEntryPointImpl - Resource Server (Permission, 403, @PreAuthorized on your APIs)
client.config.response.error.GlobalExceptionHandler.authorizationException
- Login (/oauth2/token) :
- What is "all cases"?
Add more selective pointcuts (refer to README)
Full Changelog: v2.6.0...v2.6.0
Make the error payload customizable
Full Changelog: v2.5.0...v2.5.0
The first publication to the Maven repository
Full Changelog: v2.4.0...v2.4.0
Add a test code for grant_type missing and correct the payload consistency
Synchronize api/v1/... and oauth2/token for basic token errors
- Corrected to return the same Payload from both APIs when a token error occurs
Full Changelog: v2.1.0...v2.1.0