From 31d5b5068c49492e3b17a2371db9d86ce85418d4 Mon Sep 17 00:00:00 2001
From: Eleftheria Stein-Kousathana <eleftheria.kousathana@gmail.com>
Date: Mon, 27 Jul 2020 09:34:37 +0200
Subject: [PATCH] Kotlin OAuth2 client WebFlux samples

Issue gh-8172
---
 .../reactive/oauth2/access-token.adoc         | 19 ++++-
 .../_includes/reactive/oauth2/login.adoc      | 71 ++++++++++++++++++-
 2 files changed, 86 insertions(+), 4 deletions(-)

diff --git a/docs/manual/src/docs/asciidoc/_includes/reactive/oauth2/access-token.adoc b/docs/manual/src/docs/asciidoc/_includes/reactive/oauth2/access-token.adoc
index cdefccc337..ac732704a2 100644
--- a/docs/manual/src/docs/asciidoc/_includes/reactive/oauth2/access-token.adoc
+++ b/docs/manual/src/docs/asciidoc/_includes/reactive/oauth2/access-token.adoc
@@ -21,7 +21,10 @@ You will need to replace the `client-id` and `client-secret` with values registe
 
 The next step is to instruct Spring Security that you wish to act as an OAuth2 Client so that you can obtain an access token.
 
-[source,java]
+.OAuth2 Client
+====
+.Java
+[source,java,role="primary"]
 ----
 @Bean
 SecurityWebFilterChain configure(ServerHttpSecurity http) throws Exception {
@@ -32,4 +35,18 @@ SecurityWebFilterChain configure(ServerHttpSecurity http) throws Exception {
 }
 ----
 
+
+.Kotlin
+[source,kotlin,role="secondary"]
+----
+@Bean
+fun webFilterChain(http: ServerHttpSecurity): SecurityWebFilterChain {
+    return http {
+        // ...
+        oauth2Client { }
+    }
+}
+----
+====
+
 You can now leverage Spring Security's <<webclient>> or <<webflux-roac,@RegisteredOAuth2AuthorizedClient>> support to obtain and use the access token.
diff --git a/docs/manual/src/docs/asciidoc/_includes/reactive/oauth2/login.adoc b/docs/manual/src/docs/asciidoc/_includes/reactive/oauth2/login.adoc
index 18478b9190..5883986d8a 100644
--- a/docs/manual/src/docs/asciidoc/_includes/reactive/oauth2/login.adoc
+++ b/docs/manual/src/docs/asciidoc/_includes/reactive/oauth2/login.adoc
@@ -122,7 +122,10 @@ The `client-id` and `client-secret` are linked to the provider because `keycloak
 
 A minimal OAuth2 Login configuration is shown below:
 
-[source,java]
+.Minimal OAuth2 Login
+====
+.Java
+[source,java,role="primary"]
 ----
 @Bean
 ReactiveClientRegistrationRepository clientRegistrations() {
@@ -143,9 +146,34 @@ SecurityWebFilterChain springSecurityFilterChain(ServerHttpSecurity http) {
 }
 ----
 
+.Kotlin
+[source,kotlin,role="secondary"]
+----
+@Bean
+fun clientRegistrations(): ReactiveClientRegistrationRepository {
+    val clientRegistration: ClientRegistration = ClientRegistrations
+            .fromIssuerLocation("https://idp.example.com/auth/realms/demo")
+            .clientId("spring-security")
+            .clientSecret("6cea952f-10d0-4d00-ac79-cc865820dc2c")
+            .build()
+    return InMemoryReactiveClientRegistrationRepository(clientRegistration)
+}
+
+@Bean
+fun webFilterChain(http: ServerHttpSecurity): SecurityWebFilterChain {
+    return http {
+        oauth2Login { }
+    }
+}
+----
+====
+
 Additional configuration options can be seen below:
 
-[source,java]
+.Advanced OAuth2 Login
+====
+.Java
+[source,java,role="primary"]
 ----
 @Bean
 SecurityWebFilterChain springSecurityFilterChain(ServerHttpSecurity http) {
@@ -161,9 +189,29 @@ SecurityWebFilterChain springSecurityFilterChain(ServerHttpSecurity http) {
 }
 ----
 
+.Kotlin
+[source,kotlin,role="secondary"]
+----
+@Bean
+fun webFilterChain(http: ServerHttpSecurity): SecurityWebFilterChain {
+    return http {
+        oauth2Login {
+            authenticationConverter = converter
+            authenticationManager = manager
+            authorizedClientRepository = authorizedClients
+            clientRegistrationRepository = clientRegistration
+        }
+    }
+}
+----
+====
+
 You may register a `GrantedAuthoritiesMapper` `@Bean` to have it automatically applied to the default configuration, as shown in the following example:
 
-[source,java]
+.GrantedAuthoritiesMapper Bean
+====
+.Java
+[source,java,role="primary"]
 ----
 @Bean
 public GrantedAuthoritiesMapper userAuthoritiesMapper() {
@@ -178,3 +226,20 @@ SecurityWebFilterChain springSecurityFilterChain(ServerHttpSecurity http) {
 	return http.build();
 }
 ----
+
+.Kotlin
+[source,kotlin,role="secondary"]
+----
+@Bean
+fun userAuthoritiesMapper(): GrantedAuthoritiesMapper {
+   // ...
+}
+
+@Bean
+fun webFilterChain(http: ServerHttpSecurity): SecurityWebFilterChain {
+    return http {
+        oauth2Login { }
+    }
+}
+----
+====