OAuth2AuthorizationEndpointFilter before AbstractPreAuthenticatedProcessingFilter

Issue gh-85
This commit is contained in:
Joe Grandja 2020-06-11 14:52:28 -04:00
parent 43f1f23ba9
commit 60bc9c699d

View File

@ -105,7 +105,7 @@ public final class OAuth2AuthorizationServerConfigurer<B extends HttpSecurityBui
new OAuth2AuthorizationEndpointFilter( new OAuth2AuthorizationEndpointFilter(
getRegisteredClientRepository(builder), getRegisteredClientRepository(builder),
getAuthorizationService(builder)); getAuthorizationService(builder));
builder.addFilterAfter(postProcess(authorizationEndpointFilter), FilterSecurityInterceptor.class); builder.addFilterBefore(postProcess(authorizationEndpointFilter), AbstractPreAuthenticatedProcessingFilter.class);
OAuth2TokenEndpointFilter tokenEndpointFilter = OAuth2TokenEndpointFilter tokenEndpointFilter =
new OAuth2TokenEndpointFilter( new OAuth2TokenEndpointFilter(