spring-projects / spring-projects/spring-security
It should be possible to customize authorizationRedirectStrategy in OAuth2AuthorizationRequestRedirectFilter
Nobody has claimed this yet.
- Dominant language
- Java
- Stars
- 9.6k
- Forks
- 6.3k
- Avg merge
- 2d 11h
- Merged PRs (30d)
- 52
Description
I need to change the authorizationRedirectStrategy in OAuth2AuthorizationRequestRedirectFilter because I want to manipulate the redirect_uri before redirecting.
Currently it is always initialized with new DefaultRedirectStrategy() and I can not change it.
This is necessary because we hava a multi-tenant SaaS application with wildcard subdomains for our customers and we need to redirect to a central URL before redirecting to the final destination for Oauth authentication.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with OAuth2AuthorizationRequestRedirectFilter and inspect where authorizationRedirectStrategy is initialized and used during the redirect flow. Confirm how the filter is configured, then add a supported customization path and verify that a custom strategy can manipulate redirect_uri before the OAuth2 redirect.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java, spring
- Domain
- authentication, authorization
- Issue type
- Feature
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100