java - Spring security OAuth 2 -


i have example working spring oauth 2 (https://github.com/elohalili/oauth) customized little bit, can not understand 1 thing:

in example use resources services should have token oauth server, redirects user log-in page, credentials stored in database not client id , client secret oauth (acme : acmesecret);
, in client client id , client secret passed (acme : acmesecret), clients log-in oauth server logged same client id , secret, wrong!

my question how can manage client id , secret in dynamic way user logs-in logged own credentials? , how client can know user's client id , secret pass them oauth server?

clientid , clientsecret credentials application, want authorize token, not user , password. don't know oauth2 (https://oauth.net/2/) know in oidc (http://openid.net/connect/) there possibility dynamically register new clients. clients applications, not users e.g.

person (uses username:password) -> android app/ ios app (client clientid:clientsecret) -> resource server


Comments

Popular posts from this blog

aws api gateway - SerializationException in posting new Records via Dynamodb Proxy Service in API -

asp.net - Problems sending emails from forum -