Skip to content

Support Resource Owner Password Credentials grant #6003

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
4 tasks done
jgrandja opened this issue Oct 19, 2018 · 2 comments
Closed
4 tasks done

Support Resource Owner Password Credentials grant #6003

jgrandja opened this issue Oct 19, 2018 · 2 comments
Assignees
Labels
in: oauth2 An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose) type: enhancement A general enhancement
Milestone

Comments

@jgrandja
Copy link
Contributor

jgrandja commented Oct 19, 2018

We need to provide support for the Resource Owner Password Credentials Grant.

This issue is divided into the following tasks.

Servlet

  • #31 Add password OAuth2AccessTokenResponseClient
  • #32 Implement password OAuth2AuthorizedClientProvider

Reactive

  • #102 Add password ReactiveOAuth2AccessTokenResponseClient
  • #103 Implement password ReactiveOAuth2AuthorizedClientProvider
@jgrandja jgrandja added New Feature in: oauth2 An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose) labels Oct 19, 2018
@jgrandja jgrandja added this to the 5.2.x milestone Oct 19, 2018
@jgrandja jgrandja modified the milestones: 5.2.x, 5.2.0.RC1 Apr 23, 2019
@jgrandja jgrandja self-assigned this Apr 23, 2019
@alwyn
Copy link

alwyn commented Apr 23, 2019

@jgrandja have you got any ideas on how you plan to implement this?

I am in need of this (in the client) and looking at coding it, but I'm new to framework internals and oauth2, so currently I'm just following breadcrumbs and maybe naively basing it on client credentials.

@jgrandja
Copy link
Contributor Author

Thanks for reaching out @alwyn. This feature will be implemented in ServletOAuth2AuthorizedClientExchangeFilterFunction and ServerOAuth2AuthorizedClientExchangeFilterFunction. However, depending on the outcome of the re-factoring exercise in #6811 , it may be implemented in a separate ExchangeFilterFunction. I plan on working on #6811 this coming week and after that is merged than we can start looking at implementing Resource Owner Password Grant feature. As an FYI, this will definitely get into 5.2.

@rwinch rwinch added type: enhancement A general enhancement and removed New Feature labels May 3, 2019
@jgrandja jgrandja modified the milestones: 5.2.0.M3, 5.2.x May 21, 2019
@jgrandja jgrandja removed their assignment Jun 4, 2019
@jgrandja jgrandja self-assigned this Jun 16, 2019
@jgrandja jgrandja modified the milestones: 5.2.x, 5.2.0.RC1 Jul 26, 2019
jgrandja added a commit to jgrandja/spring-security that referenced this issue Aug 21, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
in: oauth2 An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose) type: enhancement A general enhancement
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants