Skip to content

Inaccurate description of authenticationManager in reference documentation #2153

@wheleph

Description

@wheleph

Describe the bug

The description of OAuth2 Authorization Endpoint in the reference documentation states:

OAuth2AuthorizationEndpointFilter is configured with the following defaults:

...

AuthenticationManager — An AuthenticationManager composed of OAuth2AuthorizationCodeRequestAuthenticationProvider and OAuth2AuthorizationConsentAuthenticationProvider.

However I see that in the most recent version of Spring Authorization Server 1.5.1 authenticationManager for all filters is populated using the same object obtained by httpSecurity.getSharedObject(AuthenticationManager.class). See source code

Also this inaccuracy is visible in debug session:

Image

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions