From a0afec120dd772d7e0f4cfd16886238340ed28d2 Mon Sep 17 00:00:00 2001 From: Madhura Bhave Date: Tue, 22 Dec 2020 12:13:17 -0800 Subject: [PATCH] Add docs about using InMemoryOAuth2AuthorizedClientService Closes gh-24313 --- .../src/docs/asciidoc/spring-boot-features.adoc | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/spring-boot-project/spring-boot-docs/src/docs/asciidoc/spring-boot-features.adoc b/spring-boot-project/spring-boot-docs/src/docs/asciidoc/spring-boot-features.adoc index 6fb405e8bd..edd510f1ec 100644 --- a/spring-boot-project/spring-boot-docs/src/docs/asciidoc/spring-boot-features.adoc +++ b/spring-boot-project/spring-boot-docs/src/docs/asciidoc/spring-boot-features.adoc @@ -3817,6 +3817,10 @@ For example, for servlet applications, you can add your own `SecurityFilterChain } ---- +TIP: Spring Boot auto-configures an `InMemoryOAuth2AuthorizedClientService` which is used by Spring Security for the management of client registrations. +The `InMemoryOAuth2AuthorizedClientService` has limited capabilities and we recommend using it only for development environments. +For production environments, consider using a `JdbcOAuth2AuthorizedClientService` or creating your own implementation of `OAuth2AuthorizedClientService`. + [[boot-features-security-oauth2-common-providers]]