Skip to content

Commit 6befacb

Browse files
committed
feat: enable pkce for oidc client authorization code flow
1 parent cfdf6dd commit 6befacb

File tree

1 file changed

+1
-2
lines changed

1 file changed

+1
-2
lines changed

backend/src/main/java/eu/zuinnote/example/springwebdemo/configuration/SecurityConfigurationOidc.java

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -64,11 +64,10 @@ SecurityFilterChain app(
6464
return http.build();
6565
}
6666

67-
6867
/***
6968
* Automatically configure to have PKCE enabled for Authorization Code Flow. This should be the secure default and is supported by OAuth 2.1 (https://datatracker.ietf.org/doc/html/draft-ietf-oauth-v2-1-12)
7069
* Spring currently does not enable it by default: https://github.com/spring-projects/spring-security/issues/16391
71-
*
70+
*
7271
* @param clientRegistrationRepository
7372
* @return
7473
*/

0 commit comments

Comments
 (0)