OAuth2LoginAuthenticationFilter should ignore authenticated requests #5915
Labels
in: oauth2
An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)
type: bug
A general bug
Milestone
Summary
Rather than trying to authenticate again, the
OAuth2LoginAuthenticationFilter
should ignore authenticated requests. This enables getting an access token using an authorization code flow after authenticating using another mechanism (i.e. username/password).The text was updated successfully, but these errors were encountered: