|
1 |
| -= Reference Manual |
| 1 | += Overview |
2 | 2 |
|
3 |
| -This page is under construction. |
| 3 | +This site contains reference documentation and how-to guides for Spring Authorization Server. |
| 4 | + |
| 5 | +[[introducing-spring-authorization-server]] |
| 6 | +== Introducing Spring Authorization Server |
| 7 | + |
| 8 | +Spring Authorization Server is a framework that provides implementations of the OAuth 2.1 and OpenID Connect 1.0 specifications and other related specifications. |
| 9 | +It is built on top of https://spring.io/projects/spring-security[Spring Security] to provide a secure, light-weight, and customizable foundation for building identity providers and authorization server products. |
| 10 | + |
| 11 | +[[feature-list]] |
| 12 | +== Feature List |
| 13 | + |
| 14 | +Spring Authorization Server supports the following features: |
| 15 | + |
| 16 | +* The OAuth 2.1 Authorization Framework (https://datatracker.ietf.org/doc/html/draft-ietf-oauth-v2-1-05[Draft]) |
| 17 | +** Authorization Grant |
| 18 | +*** https://datatracker.ietf.org/doc/html/draft-ietf-oauth-v2-1-05#section-4.1[Authorization Code] |
| 19 | +*** https://datatracker.ietf.org/doc/html/draft-ietf-oauth-v2-1-05#section-4.2[Client Credentials] |
| 20 | +*** https://datatracker.ietf.org/doc/html/draft-ietf-oauth-v2-1-05#section-4.3[Refresh Token] |
| 21 | +** Access Token Format |
| 22 | +*** Self-contained (JWT) |
| 23 | +*** Reference (Opaque) |
| 24 | +** https://datatracker.ietf.org/doc/html/draft-ietf-oauth-v2-1-05#section-2.4[Client Authentication] |
| 25 | +*** HTTP Basic |
| 26 | +*** HTTP POST |
| 27 | +*** JSON Web Token (JWT) Profile for OAuth 2.0 Client Authentication (https://tools.ietf.org/html/rfc7523[RFC 7523]) |
| 28 | +**** `private_key_jwt` |
| 29 | +**** `client_secret_jwt` |
| 30 | +** User Consent |
| 31 | +*** https://datatracker.ietf.org/doc/html/draft-ietf-oauth-v2-1-05#section-4.1[Authorization Code Grant] |
| 32 | +* Proof Key for Code Exchange by OAuth Public Clients (PKCE) (https://tools.ietf.org/html/rfc7636[RFC 7636]) |
| 33 | +* OAuth 2.0 Token Revocation (https://tools.ietf.org/html/rfc7009[RFC 7009]) |
| 34 | +* OAuth 2.0 Token Introspection (https://tools.ietf.org/html/rfc7662[RFC 7662]) |
| 35 | +* OAuth 2.0 Authorization Server Metadata (https://tools.ietf.org/html/rfc8414[RFC 8414]) |
| 36 | +* JSON Web Token (JWT) (https://tools.ietf.org/html/rfc7519[RFC 7519]) |
| 37 | +* JSON Web Signature (JWS) (https://tools.ietf.org/html/rfc7515[RFC 7515]) |
| 38 | +* JSON Web Key (JWK) (https://tools.ietf.org/html/rfc7517[RFC 7517]) |
| 39 | +* OpenID Connect Core 1.0 (https://openid.net/specs/openid-connect-core-1_0.html[spec]) |
| 40 | +** https://openid.net/specs/openid-connect-core-1_0.html#CodeFlowAuth[Authorization Code Flow] |
| 41 | +** https://openid.net/specs/openid-connect-core-1_0.html#UserInfo[UserInfo Endpoint] |
| 42 | +* OpenID Connect Discovery 1.0 (https://openid.net/specs/openid-connect-discovery-1_0.html[spec]) |
| 43 | +** https://openid.net/specs/openid-connect-discovery-1_0.html#ProviderConfig[Provider Configuration Endpoint] |
| 44 | +* OpenID Connect Dynamic Client Registration 1.0 (https://openid.net/specs/openid-connect-registration-1_0.html[spec]) |
| 45 | +** https://openid.net/specs/openid-connect-registration-1_0.html#ClientRegistration[Client Registration Endpoint] |
| 46 | +** https://openid.net/specs/openid-connect-registration-1_0.html#ClientConfigurationEndpoint[Client Configuration Endpoint] |
0 commit comments