Browse Source

oauth 2.x ClientSecret fix

MaxKey 2 years ago
parent
commit
acf492b067

+ 1 - 1
maxkey-protocols/maxkey-protocol-oauth-2.0/src/main/java/org/maxkey/autoconfigure/Oauth20AutoConfiguration.java

@@ -223,7 +223,7 @@ public class Oauth20AutoConfiguration implements InitializingBean {
     @Bean(name = "oauth20JdbcClientDetailsService")
     public JdbcClientDetailsService jdbcClientDetailsService(DataSource dataSource,PasswordEncoder passwordReciprocal) {
         JdbcClientDetailsService clientDetailsService = new JdbcClientDetailsService(dataSource);
-        clientDetailsService.setPasswordEncoder(passwordReciprocal);
+        //clientDetailsService.setPasswordEncoder(passwordReciprocal);
         _logger.debug("OAuth 2 Jdbc ClientDetails Service init.");
         return clientDetailsService;
     }    

+ 1 - 1
maxkey-webs/maxkey-web-mgt/src/main/java/org/maxkey/Oauth20ClientAutoConfiguration.java

@@ -50,7 +50,7 @@ public class Oauth20ClientAutoConfiguration  implements InitializingBean {
     public JdbcClientDetailsService oauth20JdbcClientDetailsService(
                 DataSource dataSource,PasswordEncoder passwordReciprocal) {
 	    JdbcClientDetailsService clientDetailsService = new JdbcClientDetailsService(dataSource);
-	    clientDetailsService.setPasswordEncoder(passwordReciprocal);
+	    //clientDetailsService.setPasswordEncoder(passwordReciprocal);
 	    _logger.debug("JdbcClientDetailsService inited.");
         return clientDetailsService;
     }

+ 2 - 2
maxkey-webs/maxkey-web-mgt/src/main/java/org/maxkey/web/apps/contorller/OAuth20DetailsController.java

@@ -107,13 +107,13 @@ public class OAuth20DetailsController  extends BaseAppContorller {
 		if(oauth20Details.getProtocol().equalsIgnoreCase(ConstsProtocols.OAUTH21)) {
             oauth20Details.setPkce(OAuth2Constants.PKCE_TYPE.PKCE_TYPE_YES);
         }
+		
+		transform(oauth20Details);
 		oauth20Details.setClientSecret(oauth20Details.getSecret());
 		oauth20Details.setInstId(currentUser.getInstId());
         oauth20JdbcClientDetailsService.updateClientDetails(oauth20Details.clientDetailsRowMapper());
         oauth20JdbcClientDetailsService.updateClientSecret(oauth20Details.getClientId(), oauth20Details.getClientSecret());
         
-		transform(oauth20Details);
-		
 		if (appsService.updateApp(oauth20Details)) {
 		    return new Message<AppsOAuth20Details>(Message.SUCCESS).buildResponse();
 		} else {