Spring/spring-boot
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Add support for public key file for OAuth2 resource server

Browse Source 
Closes gh-15814
This commit is contained in:
Madhura Bhave
2019-04-08 16:14:18 -07:00
parent cd914aaa4d
commit 7054a33e70
9 changed files with 238 additions and 31 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
spring-boot-project/spring-boot-docs/src/main/asciidoc/spring-boot-features.adoc
View File

@@ -3657,6 +3657,12 @@ as shown in the following examples:
spring.security.oauth2.resourceserver.jwt.issuer-uri=https://dev-123456.oktapreview.com/oauth2/default/
----
NOTE: If the authorization server does not support a JWK Set URI, you can configure the
resource server with the Public Key used for verifying the signature of the JWT. This can
be done using the `spring.security.oauth2.resourceserver.jwt.public-key-location` property,
where the value needs to point to a file containing the public key in the PEM-encoded x509
format.
The same properties are applicable for both servlet and reactive applications.
Alternatively, you can define your own `JwtDecoder` bean for servlet applications