Skip to content

Add SpringOpaqueTokenIntrospector #9354

@jzheaux

Description

@jzheaux

The extent to which the Nimbus library is used in Nimbus(Reactive)OpaqueTokenIntrospector is minimal enough that there's value in creating Nimbus-free versions in order to simplify dependency management with com.nimbusds:oauth2-oidc-sdk.

These Nimbus-free versions would become the default.

The existing classes use Nimbus for parsing the introspection HTTP response. These new implementations would instead rely on RestTemplate or WebClient to parse the response as a Map of attributes. Now as a Map, the convertClaimSet(TokenIntrospectionSuccessResponse) would become convertClaimSet(Map).

For testing, all the tests in Nimbus(Reactive)OpaqueTokenIntrospector should be applicable for Spring(Reactive)OpaqueTokenIntrospector.

Metadata

Metadata

Assignees

Labels

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)type: enhancementA general enhancement

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions