spring-projects / spring-projects/spring-security
Spring Security Authorization Server is missing the Jackson Mixin for FactorGrantedAuthority
Nobody has claimed this yet.
- Dominant language
- Java
- Stars
- 9.6k
- Forks
- 6.3k
- Avg merge
- 2d 11h
- Merged PRs (30d)
- 52
Description
Describe the bug
JdbcOAuth2AuthorizationService fails to deserialize FactorGrantedAuthority because of missing Jackson mixin.
To Reproduce
- Setup Spring Security Authorization Server to use JDBC
- Setup Cloud Gatway with OAuth2 Client token relay
- Create an API
- Login
- Calls the API through cloud gateway
Expected behavior
One should be able to call the API successfully.
Sample
https://github.com/k6leung/MongoAuthServerTest
Reports that include a sample will take priority over reports that do not.
At times, we may require a sample, so it is good to try and include a sample up front.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start at JdbcOAuth2AuthorizationService and follow the FactorGrantedAuthority deserialization path, using the linked sample to reproduce the failure. Done means the JDBC authorization data deserializes successfully and the API call through the gateway succeeds.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java, spring
- Domain
- authorization, databases, security
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Active
- Clarity
- Clearly specified
- Newbie friendliness
- 72/100