DefaultServerOAuth2AuthorizationRequestResolver should use fromUri #6952
Labels
in: oauth2
An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)
status: backported
An issue that has been backported to maintenance branches
type: bug
A general bug
Milestone
Summary
DefaultServerOAuth2AuthorizationRequestResolver
should useUriComponentsBuilder.fromUri
rather thanHttpComponentsBuilder.fromHttpRequest
to be consistent with the rest of Spring Security and to ensure users opt into using request headers.The text was updated successfully, but these errors were encountered: