1.4.0

• Fixes #136: Cannot set custom userInfoEndpoint user/oidc user service
• Add new AuthoritiesProvider interface to make it easier to add custom GrantedAuthority to the user. Just add a bean that implements the new AuthoritiesProvider:

@Bean
AuthoritiesProvider myCustomAuthoritiesProvider() {
    return (user, userRequest) -> lookupExtraAuthoritesByName(user.getAttributes().get("email"));
}

1.3.0

• Updated to Spring Boot 2.2.0.RELEASE
• Added new config property postLogoutRedirectUri, if set an RP-Initiated (SSO) logout will be configured automatically

1.2.1

• Add support for Spring Boot 2.2.0.M3
• Update to Jackson 2.9.9

1.2.0

• Adds a check for required properties before configuring OAuth flows #121
• Add Resource Server 401 response body

1.1.0

• Added support for Spring WebFlux
• Now running CI against Java 8 and 11

1.0.0

This version represents a re-write of this library in order to support Spring Boot 2.1 (Spring Security 5.1) which uses a different OAuth2/OIDC library.

• The @ResourceServer annotation is no longer used (See the Readme for an updated example)
• Spring Security ONLY support local access token validation, the property okta.oauth2.localTokenValidation is no longer supported
• The property okta.oauth2.roles-claim has been replaced with okta.oauth2.groups-claim

0.6.1

Added validation to detect common copy/paste errors for okta.oauth2.* properties

0.6.0

• Fixed parsing issue when using Spring Boot 2 and kabab case instead of camel case, i.e. okta.oauth2.client-id vs okta.oauth2.clientId
• Added support for using OAuth2SsoCustomConfiguration (providing a WebSecurityConfigurerAdapter containing a @EnableOAuth2Sso annotation.

0.5.0

Added support for Spring Boot 2.0, our samples have been updated too!

To use Spring Boot 2.0 you will need to include the following dependency:

<dependency>
    <groupId>org.springframework.security.oauth.boot</groupId>
    <artifactId>spring-security-oauth2-autoconfigure</artifactId>
    <version>2.0.1.RELEASE</version>
</dependency>

(Spring Boot 1.5 is also still supported)

0.4.1

• Update dependencies
  See: https://spring.io/blog/2018/04/05/multiple-cve-reports-published-for-the-spring-framework