org.springframework.security.oauth.spring-security-oauth2-1.0.xsd Maven / Gradle / Ivy
The newest version!
Specifies that the oauth provider filters should be applied to the application security policy.
Whether to disable the user_agent flow.
Whether to disable the web_server flow.
The reference to the bean that defines the verification code services. Default value is an instance of
"org.springframework.security.oauth2.provider.webserver.InMemoryVerificationCodeServices".
The URL of the page that handles the user approval form.
The name of the parameter that is used to indicate user approval of the client authentication request.
Default value: "user_oauth_approval".
The reference to the bean that defines the redirect resolver, used during the web_server flow.
Default value is an instance of "org.springframework.security.oauth2.provider.webserver.DefaultRedirectResolver".
The reference to the bean that defines the authentication cache, used during the web_server flow.
Default value is an instance of "org.springframework.security.oauth2.provider.webserver.DefaultClientAuthenticationCache".
The reference to the bean that defines the redirect strategy, used during the web_server flow.
Default value is an instance of "org.springframework.security.oauth.provider.DefaultRedirectStrategy".
The reference to the bean that defines the filter that will process a user approval request, used during the web_server flow.
Default value is an instance of "org.springframework.security.oauth2.provider.webserver.BasicUserApprovalFilter".
The reference to the bean that defines the handler for user approval (instance of "org.springframework.security.oauth2.provider.webserver.UserApprovalHandler"), used during web_server flow.
Default value is an instance of "org.springframework.security.oauth2.provider.webserver.BasicUserApprovalFilter".
Whether to disable the device_code flow.
Whether to disable the username flow.
Whether to disable the client_credentials flow.
Whether to disable the assertion flow.
The reference to the bean that defines the client details service.
The reference to the bean that defines the token services. Default value is an instance of
"org.springframework.security.oauth2.provider.token.InMemoryOAuth2ProviderTokenServices".
The URL at which an authorization request will be serviced. Default value: "/oauth/authorize"
The default flow type (in case none is specified by the client). Default value is "web_server".
The reference to the bean that defines the success handler for an OAuth 2 authorization request
Default value is an instance of "org.springframework.security.oauth2.provider.OAuth2AuthorizationSuccessHandler".
The reference to the bean that defines the serialization service for an OAuth 2 response
Default value is an instance of "org.springframework.security.oauth2.common.DefaultOAuth2SerializationService".
The reference to the bean that defines the valve which handles the difference oauth flows.
Default value is an instance of "org.springframework.security.oauth2.provider.DefaultOAuth2FlowValve".
Default element that contains the definition of the OAuth clients that are allowed to access this service.
Definition of a client.
The client id.
The client secret. If the secret is undefined or empty (the default) the client does
not require a secret.
The scope to which the client is limited (comma-separated). If scope is undefined or empty (the default) the client
is not limited by scope.
Flows that are authorized for the client to use (comma-separated). Default value is "web_server".
Authorities that are granted to the client (comma-separated).
© 2015 - 2025 Weber Informatics LLC | Privacy Policy