Skip to content

Commit 576cc67

Browse files
committed
Revise document to replace outdated NimbusOpaqueTokenIntrospector with SpringOpaqueTokenIntrospector
Signed-off-by: Yanming Zhou <[email protected]>
1 parent 39b195c commit 576cc67

File tree

2 files changed

+7
-9
lines changed

2 files changed

+7
-9
lines changed

docs/modules/ROOT/pages/reactive/oauth2/resource-server/opaque-token.adoc

+2-3
Original file line numberDiff line numberDiff line change
@@ -3,9 +3,8 @@
33
[[webflux-oauth2resourceserver-opaque-minimaldependencies]]
44
== Minimal Dependencies for Introspection
55
As described in xref:servlet/oauth2/resource-server/jwt.adoc#oauth2resourceserver-jwt-minimaldependencies[Minimal Dependencies for JWT], most Resource Server support is collected in `spring-security-oauth2-resource-server`.
6-
However, unless you provide a custom <<webflux-oauth2resourceserver-opaque-introspector-bean,`ReactiveOpaqueTokenIntrospector`>>, the Resource Server falls back to `ReactiveOpaqueTokenIntrospector`.
7-
This means that both `spring-security-oauth2-resource-server` and `oauth2-oidc-sdk` are necessary to have a working minimal Resource Server that supports opaque Bearer Tokens.
8-
See `spring-security-oauth2-resource-server` in order to determine the correct version for `oauth2-oidc-sdk`.
6+
However, unless you provide a custom <<webflux-oauth2resourceserver-opaque-introspector-bean,`ReactiveOpaqueTokenIntrospector`>>, the Resource Server falls back to `SpringReactiveOpaqueTokenIntrospector`.
7+
This means that only `spring-security-oauth2-resource-server` is necessary to have a working minimal Resource Server that supports opaque Bearer Tokens.
98

109
[[webflux-oauth2resourceserver-opaque-minimalconfiguration]]
1110
== Minimal Configuration for Introspection

docs/modules/ROOT/pages/servlet/oauth2/resource-server/opaque-token.adoc

+5-6
Original file line numberDiff line numberDiff line change
@@ -4,9 +4,8 @@
44
[[oauth2resourceserver-opaque-minimaldependencies]]
55
== Minimal Dependencies for Introspection
66
As described in xref:servlet/oauth2/resource-server/jwt.adoc#oauth2resourceserver-jwt-minimaldependencies[Minimal Dependencies for JWT] most of Resource Server support is collected in `spring-security-oauth2-resource-server`.
7-
However unless a custom <<oauth2resourceserver-opaque-introspector,`OpaqueTokenIntrospector`>> is provided, the Resource Server will fallback to NimbusOpaqueTokenIntrospector.
8-
Meaning that both `spring-security-oauth2-resource-server` and `oauth2-oidc-sdk` are necessary in order to have a working minimal Resource Server that supports opaque Bearer Tokens.
9-
Please refer to `spring-security-oauth2-resource-server` in order to determine the correct version for `oauth2-oidc-sdk`.
7+
However unless a custom <<oauth2resourceserver-opaque-introspector,`OpaqueTokenIntrospector`>> is provided, the Resource Server will fallback to `SpringOpaqueTokenIntrospector`.
8+
This means that only `spring-security-oauth2-resource-server` is necessary in order to have a working minimal Resource Server that supports opaque Bearer Tokens.
109

1110
[[oauth2resourceserver-opaque-minimalconfiguration]]
1211
== Minimal Configuration for Introspection
@@ -361,7 +360,7 @@ Xml::
361360
[source,xml,role="primary"]
362361
----
363362
<bean id="opaqueTokenIntrospector"
364-
class="org.springframework.security.oauth2.server.resource.introspection.NimbusOpaqueTokenIntrospector">
363+
class="org.springframework.security.oauth2.server.resource.introspection.SpringOpaqueTokenIntrospector">
365364
<constructor-arg value="${spring.security.oauth2.resourceserver.opaquetoken.introspection_uri}"/>
366365
<constructor-arg value="${spring.security.oauth2.resourceserver.opaquetoken.client_id}"/>
367366
<constructor-arg value="${spring.security.oauth2.resourceserver.opaquetoken.client_secret}"/>
@@ -445,7 +444,7 @@ Xml::
445444
[source,xml,role="secondary"]
446445
----
447446
<bean id="opaqueTokenIntrospector"
448-
class="org.springframework.security.oauth2.server.resource.introspection.NimbusOpaqueTokenIntrospector">
447+
class="org.springframework.security.oauth2.server.resource.introspection.SpringOpaqueTokenIntrospector">
449448
<constructor-arg value="https://idp.example.com/introspect"/>
450449
<constructor-arg value="client"/>
451450
<constructor-arg value="secret"/>
@@ -740,7 +739,7 @@ By default, Resource Server uses connection and socket timeouts of 30 seconds ea
740739
This may be too short in some scenarios.
741740
Further, it doesn't take into account more sophisticated patterns like back-off and discovery.
742741

743-
To adjust the way in which Resource Server connects to the authorization server, `NimbusOpaqueTokenIntrospector` accepts an instance of `RestOperations`:
742+
To adjust the way in which Resource Server connects to the authorization server, `SpringOpaqueTokenIntrospector` accepts an instance of `RestOperations`:
744743

745744
[tabs]
746745
======

0 commit comments

Comments
 (0)