$ curl https://uaa.run.pivotal.io/token_key @@ -2698,7 +2698,7 @@ provide a URI where it can be downloaded (as a JSON object with aWarning-If you use the oauth2.resource.jwt.keyUrithe authorization +If you use thespring.oauth2.resource.jwt.keyUrithe authorization server needs to be running when your application starts up. It will log a warning if it can’t find the key, and tell you what to do to fix it. @@ -2708,15 +2708,15 @@ it.You can set the preferred scope (as a comma-separated list or YAML -array) in
oauth2.client.scope. It defaults to empty, in which case +array) inspring.oauth2.client.scope. It defaults to empty, in which case most Authorization Servers will ask the user for approval for the maximum allowed scope for the client.-There is also a setting for
oauth2.client.clientAuthenticationSchemewhich +There is also a setting for
spring.oauth2.client.clientAuthenticationSchemewhich defaults to "header" (but you might need to set it to "form" if, like Github for instance, your OAuth2 provider doesn’t like header -authentication). Theoauth2.client.*properties are bound to an instance +authentication). Thespring.oauth2.client.*properties are bound to an instance ofAuthorizationCodeResourceDetailsso all its properties can be specified.@@ -2767,7 +2767,7 @@ the matching patterns for the OAuth2 SSO, even if you haveOAuth2SsoConfigurerbeans as well. The default logout path is "/logout" and it gets similar treatment, as does the "home" page (which is the logout success page, defaults to "/"). Those paths can -be overriden by settingoauth2.sso.*' (`loginPath,logoutPathand +be overriden by settingspring.oauth2.sso.*' (`loginPath,logoutPathandhome.path).@@ -3083,7 +3083,7 @@ service or the "resource" service if you have one).