-
Notifications
You must be signed in to change notification settings - Fork 829
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Fix regression with legacy redirect patterns #2035
Conversation
Port wildcards were working, but because of spring change this fails now Bring it back now with this PR. Remark: legacy patterns were in past and again now written to log with warnings, so that you see them Example WARN --- LegacyRedirectResolver: OAuth client app is configured with a redirect_uri which performs implicit or wildcard matching in legacy redirect uri matching mode. In this instance, the requested uri http://localhost:3000/authentication/callback matches the configured uri http://localhost:*/authentication/callback. Please consider configuring your requested redirect uri to exactly match the redirect_uri for this client.
We have created an issue in Pivotal Tracker to manage this: https://www.pivotaltracker.com/story/show/183350365 The labels on this github issue will be updated when the story is started. |
@torsten-sap this features was requested from SAP but obviously no more clients with port pattern are used, so did you received any issues here ? |
Looks good to me, @peterhaochen47, @bruce-ricard. |
Port wildcards were working, but because of spring change this fails now Bring it back now with this PR.
Remark: legacy patterns were in past and again now written to log with warnings, so that you see them
Example
WARN --- LegacyRedirectResolver: OAuth client app is configured with a redirect_uri which performs implicit or wildcard matching in legacy redirect uri matching mode. In this instance, the requested uri http://localhost:3000/authentication/callback matches the configured uri http://localhost:*/authentication/callback. Please consider configuring your requested redirect uri to exactly match the redirect_uri for this client.