Search:

Hi,
I try to find a way for restrict urls and http Methods by spring security plugin. Does anyone know, how I can do it, or it is possible or not?
Thanks

Dear Dave,
for point 2, let's see this example in sparklr. If I change spring-servlet.xml, to :



<http pattern="/photos/**" entry-point-ref="oauthAuthenticationEntryPoint"...

Hi,
I use Spring OAuth M6. I have some problems :
1. when I want to get token from client, sometimes it detects clientId (in AuthorizationCodeTokenGranter:83) as a client and sometimes as a...

Dear Dave,
In addittion I check tonr client. As you know tonr client, uses read scope. I check the log of Voter. It is :
"

[DEBUG] UnanimousBased - Voter:...

Dear Dave,
Thank you for your support and help.
I did your first suggestion, If we use this token, the client uses the user principal and role, and I think it is very dangerous, because client can...

I did n't use tonr. How I must send token? In M3 I send it as a parameter in request(GET).

Dear Dave
Thanks for your replies.
It was my fault.
I have two another problem.
1. When a client takes an token, and wants to call a service, Its principal is anonymousUser and grantAuthority is...

Dear Dave
Thank you.
I found It. It is moved to another package. I used it and it throws an ClassCastException: VerificationCodeAuthenticationToken cannont be cast to...

Hi,
Sparkle and tonr download links does not work. I download its source from github, but it does not work by M4.
I want to switch from M3 to M4 but ClientAuthenticationCache was removed in M4....

Thanks Dave for your attention.
let's describe the problem by a sample:
I use a browser for testing my OAuth server instead of spring OAuth client.
I take a token(for example "xxx"), then I call...

Hello.
I'm using spring-OAuth 1.0.0.M3. I found that after first client request by a token, Spring creates a session for that client, and that way client can send request without any token...

I have a question about redirect-url(I don't know it's related to this thread or no). How I can set redirect-url(or callback) in server and verify it by client request.
Regards,
Sina.