Skip to content

Consider renaming OAuth2TokenIntrospectionClient #7245

Closed
@jzheaux

Description

@jzheaux

The contract for OAuth2TokenIntrospectionClient is String -> Map, taking an opaque token and returning its associated attributes.

The name of the class implies that only implementations that are clients to an OAuth 2.0 Token Introspection endpoint are acceptable.

However, there are use cases where an application has a token and would like to verify and introspect it in a custom way, say via a Redis store.

As such, it would be better if this class were named something more generic like OpaqueTokenIntrospector.

Additionally, the DSL should change to correspond. What was:

http
    .oauth2ResourceServer()
        .opaqueToken()
            .introspectionClient(...)

Should now be:

http
    .oauth2ResourceServer()
        .opaqueToken()
            .introspector(...)

Metadata

Metadata

Assignees

Labels

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)type: enhancementA general enhancement

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions