-
Notifications
You must be signed in to change notification settings - Fork 830
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Refactor password grant #3165
Refactor password grant #3165
Conversation
strehle
commented
Nov 28, 2024
- if origin is available, retrieve IdP and check if password can be used
- use always identityProviderProvisioning and remove externalOAuthProviderConfigurator
* if origin is available, retrieve IdP and check if password can be used * use always identityProviderProvisioning and remove externalOAuthProviderConfigurator
...org/cloudfoundry/identity/uaa/authentication/manager/PasswordGrantAuthenticationManager.java
Outdated
Show resolved
Hide resolved
...org/cloudfoundry/identity/uaa/authentication/manager/PasswordGrantAuthenticationManager.java
Outdated
Show resolved
Hide resolved
@strehle I believe this caused a regression with the password grant. If the IdP config only has the discoveryUrl set, the identityProviderProvisioning lookup does not fill in the tokenUrl like the externalOAuthProviderConfigurator did, and this results in a NullPointerException here: |
@mikeroda ok, we can check ( FYI @adrianhoelzl-sap ) because this PR was created as optimization for IDP look. Can you either create an issue ticket with information about type of IdP (oauth or oidc) and then simply discovery only and you do password grant correct ? |