diff --git a/config/src/main/java/org/springframework/security/config/web/server/ServerHttpSecurity.java b/config/src/main/java/org/springframework/security/config/web/server/ServerHttpSecurity.java index c74744d1d1..6d89dadc24 100644 --- a/config/src/main/java/org/springframework/security/config/web/server/ServerHttpSecurity.java +++ b/config/src/main/java/org/springframework/security/config/web/server/ServerHttpSecurity.java @@ -1121,6 +1121,23 @@ public class ServerHttpSecurity { private OAuth2ClientSpec() {} } + /** + * Configures OAuth 2.0 Resource Server support. + * + *
+ * @Bean
+ * public SecurityWebFilterChain springSecurityFilterChain(ServerHttpSecurity http) {
+ * http
+ * // ...
+ * .oauth2ResourceServer()
+ * .jwt()
+ * .publicKey(publicKey());
+ * return http.build();
+ * }
+ *
+ *
+ * @return the {@link OAuth2ResourceServerSpec} to customize
+ */
public OAuth2ResourceServerSpec oauth2ResourceServer() {
if (this.resourceServer == null) {
this.resourceServer = new OAuth2ResourceServerSpec();
@@ -1199,6 +1216,11 @@ public class ServerHttpSecurity {
return this;
}
+ /**
+ * Enables JWT Resource Server support.
+ *
+ * @return the {@link JwtSpec} for additional configuration
+ */
public JwtSpec jwt() {
if (this.jwt == null) {
this.jwt = new JwtSpec();
@@ -1206,6 +1228,11 @@ public class ServerHttpSecurity {
return this.jwt;
}
+ /**
+ * Enables Opaque Token Resource Server support.
+ *
+ * @return the {@link OpaqueTokenSpec} for additional configuration
+ */
public OpaqueTokenSpec opaqueToken() {
if (this.opaqueToken == null) {
this.opaqueToken = new OpaqueTokenSpec();