spring-projects / spring-projects/spring-security
Invalidate Spring session when user leaves consent screen in Spring authorization server
Nobody has claimed this yet.
- Dominant language
- Java
- Stars
- 9.6k
- Forks
- 6.3k
- Avg merge
- 2d 11h
- Merged PRs (30d)
- 52
Description
Expected Behavior
I would like to be able to invalidate Spring session when user leaves Consent screen in spring authorization server.
Current Behavior
This is technically possible however it requires copying code from:
org.springframework.security.oauth2.server.authorization.web.OAuth2AuthorizationEndpointFilter#sendAuthorizationResponse
and
org.springframework.security.oauth2.server.authorization.web.OAuth2AuthorizationEndpointFilter#sendErrorResponse
It should be possible to reuse those existing handlers so it's not required to copy paste the code when customizing
Context
I'm building an authentication flow based on Spring authorization server, where i want user to need to authenticate each time he/she interacts with the authorization server
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reading OAuth2AuthorizationEndpointFilter#sendAuthorizationResponse and #sendErrorResponse, which the issue identifies as the existing response-handling code. Trace how a customized consent-screen exit currently reaches these paths and determine what reusable entry point would avoid copied code. Done means a Spring authorization server customization can invalidate the session on exit without duplicating those handlers.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java, spring
- Domain
- authorization, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 48/100