Limit a client to a specific resource server

[zxuanhong]

Expected Behavior

@OverRide
public void configure(ClientDetailsServiceConfigurer clients) throws Exception {
ClientDetailsServiceBuilder.ClientBuilder clientBuilder = clients
.inMemory()
.withClient("client1")
.resourceIds("resourceServer1")
...

Context

1. How to configure a resource id for a resource server
2. Client management How to store the resource ids authorized by the current client id(The old authorization management had this field)

[jgrandja]

@Zxiaozhou Thanks for getting in touch, but it feels like this is a question that would be better suited to Stack Overflow. We prefer to use GitHub issues only for bugs and enhancements. Feel free to update this issue with a link to the re-posted question (so that other people can find it).

Please see OAuth2TokenCustomizer as it allows you to add custom claims in the Jwt, e.g. resource_id.

You can store the resource_id's for each client in RegisteredClient.clientSettings.

[jgrandja]

Related gh-279