浏览代码

Update auth_code ref doc for oauth2-client

Joe Grandja 6 年之前
父节点
当前提交
8aa55fe81b
共有 1 个文件被更改,包括 7 次插入5 次删除
  1. 7 5
      docs/manual/src/docs/asciidoc/_includes/servlet/preface/oauth2-client.adoc

+ 7 - 5
docs/manual/src/docs/asciidoc/_includes/servlet/preface/oauth2-client.adoc

@@ -322,6 +322,10 @@ spring:
             authorization-grant-type: authorization_code
             redirect-uri: "{baseUrl}/authorized/okta"
             scope: read, write
+        provider:
+          okta:
+            authorization-uri: https://dev-1234.oktapreview.com/oauth2/v1/authorize
+            token-uri: https://dev-1234.oktapreview.com/oauth2/v1/token
 ----
 
 A request with the base path `/oauth2/authorization/okta` will initiate the Authorization Request redirect by the `OAuth2AuthorizationRequestRedirectFilter` and ultimately start the Authorization Code grant flow.
@@ -474,7 +478,7 @@ public class OAuth2ClientSecurityConfig extends WebSecurityConfigurerAdapter {
 			    oauth2Client
 				    .authorizationCodeGrant(authorizationCodeGrant ->
 				        authorizationCodeGrant
-					        .authorizationRequestRepository(this.customAuthorizationRequestRepository())
+					        .authorizationRequestRepository(this.authorizationRequestRepository())
 					        ...
 					)
 			);
@@ -488,9 +492,7 @@ public class OAuth2ClientSecurityConfig extends WebSecurityConfigurerAdapter {
 [NOTE]
 Please refer to the https://tools.ietf.org/html/rfc6749#section-4.1.3[Access Token Request/Response] protocol flow for the Authorization Code grant.
 
-The primary role of the `OAuth2AccessTokenResponseClient` is to exchange an authorization grant credential for an access token credential at the Authorization Server's Token Endpoint.
-
-The default implementation of `OAuth2AccessTokenResponseClient` for the Authorization Code grant is `DefaultAuthorizationCodeTokenResponseClient`, which uses a `RestOperations` for exchanging an authorization code for an access token at the Token Endpoint.
+The default implementation of `OAuth2AccessTokenResponseClient` for the Authorization Code grant is `DefaultAuthorizationCodeTokenResponseClient`, which uses a `RestOperations` for exchanging an authorization code for an access token at the Authorization Server’s Token Endpoint.
 
 The `DefaultAuthorizationCodeTokenResponseClient` is quite flexible as it allows you to customize the pre-processing of the Token Request and/or post-handling of the Token Response.
 
@@ -540,7 +542,7 @@ public class OAuth2ClientSecurityConfig extends WebSecurityConfigurerAdapter {
 			    oauth2Client
 				    .authorizationCodeGrant(authorizationCodeGrant ->
 				        authorizationCodeGrant
-					        .accessTokenResponseClient(this.customAccessTokenResponseClient())
+					        .accessTokenResponseClient(this.accessTokenResponseClient())
 					        ...
 					 )
 			);