java - Spring security OAuth 2 -
i have example working spring oauth 2 (https://github.com/elohalili/oauth) customized little bit, can not understand 1 thing:
in example use resources services should have token oauth server, redirects user log-in page, credentials stored in database not client id , client secret oauth (acme : acmesecret);
, in client client id , client secret passed (acme : acmesecret), clients log-in oauth server logged same client id , secret, wrong!
my question how can manage client id , secret in dynamic way user logs-in logged own credentials? , how client can know user's client id , secret pass them oauth server?
clientid
, clientsecret
credentials application, want authorize token, not user , password. don't know oauth2 (https://oauth.net/2/) know in oidc (http://openid.net/connect/) there possibility dynamically register new clients. clients applications, not users e.g.
person (uses username:password) -> android app/ ios app (client clientid:clientsecret) -> resource server
Comments
Post a Comment