spring-projects / spring-projects/spring-security
Document Application-Scoped Access Tokens for Reactive OAuth2 Client Applications
Open
Nobody has claimed this yet.
in: docs
in: oauth2
type: enhancement
- Dominant language
- Java
- Stars
- 9.6k
- Forks
- 6.3k
- Avg merge
- 2d 11h
- Merged PRs (30d)
- 52
Description
The Spring Security documentation provides guidance on how to scope access tokens for servlet applications in the "Use the Client Credentials Grant" section. However, equivalent documentation for reactive applications (WebClient) is currently missing.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with the servlet “Use the Client Credentials Grant” section linked in the issue, then find the corresponding reactive OAuth2 client and WebClient documentation. Add equivalent guidance for application-scoped access tokens in reactive applications, and verify that the reactive documentation clearly covers the same use case.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java, spring
- Domain
- documentation, security
- Issue type
- Documentation
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 48/100