|
4 | 4 | [[oauth2resourceserver-opaque-minimaldependencies]] |
5 | 5 | == Minimal Dependencies for Introspection |
6 | 6 | As described in xref:servlet/oauth2/resource-server/jwt.adoc#oauth2resourceserver-jwt-minimaldependencies[Minimal Dependencies for JWT] most of Resource Server support is collected in `spring-security-oauth2-resource-server`. |
7 | | -However unless a custom <<oauth2resourceserver-opaque-introspector,`OpaqueTokenIntrospector`>> is provided, the Resource Server will fallback to NimbusOpaqueTokenIntrospector. |
8 | | -Meaning that both `spring-security-oauth2-resource-server` and `oauth2-oidc-sdk` are necessary in order to have a working minimal Resource Server that supports opaque Bearer Tokens. |
9 | | -Please refer to `spring-security-oauth2-resource-server` in order to determine the correct version for `oauth2-oidc-sdk`. |
| 7 | +However unless a custom <<oauth2resourceserver-opaque-introspector,`OpaqueTokenIntrospector`>> is provided, the Resource Server will fallback to SpringOpaqueTokenIntrospector. |
10 | 8 |
|
11 | 9 | [[oauth2resourceserver-opaque-minimalconfiguration]] |
12 | 10 | == Minimal Configuration for Introspection |
@@ -361,7 +359,7 @@ Xml:: |
361 | 359 | [source,xml,role="primary"] |
362 | 360 | ---- |
363 | 361 | <bean id="opaqueTokenIntrospector" |
364 | | - class="org.springframework.security.oauth2.server.resource.introspection.NimbusOpaqueTokenIntrospector"> |
| 362 | + class="org.springframework.security.oauth2.server.resource.introspection.SpringOpaqueTokenIntrospector"> |
365 | 363 | <constructor-arg value="${spring.security.oauth2.resourceserver.opaquetoken.introspection_uri}"/> |
366 | 364 | <constructor-arg value="${spring.security.oauth2.resourceserver.opaquetoken.client_id}"/> |
367 | 365 | <constructor-arg value="${spring.security.oauth2.resourceserver.opaquetoken.client_secret}"/> |
@@ -445,7 +443,7 @@ Xml:: |
445 | 443 | [source,xml,role="secondary"] |
446 | 444 | ---- |
447 | 445 | <bean id="opaqueTokenIntrospector" |
448 | | - class="org.springframework.security.oauth2.server.resource.introspection.NimbusOpaqueTokenIntrospector"> |
| 446 | + class="org.springframework.security.oauth2.server.resource.introspection.SpringOpaqueTokenIntrospector"> |
449 | 447 | <constructor-arg value="https://idp.example.com/introspect"/> |
450 | 448 | <constructor-arg value="client"/> |
451 | 449 | <constructor-arg value="secret"/> |
@@ -740,7 +738,7 @@ By default, Resource Server uses connection and socket timeouts of 30 seconds ea |
740 | 738 | This may be too short in some scenarios. |
741 | 739 | Further, it doesn't take into account more sophisticated patterns like back-off and discovery. |
742 | 740 |
|
743 | | -To adjust the way in which Resource Server connects to the authorization server, `NimbusOpaqueTokenIntrospector` accepts an instance of `RestOperations`: |
| 741 | +To adjust the way in which Resource Server connects to the authorization server, `SpringOpaqueTokenIntrospector` accepts an instance of `RestOperations`: |
744 | 742 |
|
745 | 743 | [tabs] |
746 | 744 | ====== |
|
0 commit comments