-
Notifications
You must be signed in to change notification settings - Fork 6.1k
OAuth 2.0 Features Matrix
Spring Security (5.0+) | Spring Security OAuth (2.2+) | Spring Cloud Security (1.2+) | Spring Boot OAuth2 (1.5.x) | |
---|---|---|---|---|
Authorization Grants |
||||
Authorization Code |
✔ |
|||
Implicit |
✔ |
|||
Resource Owner Password Credentials |
✔ |
|||
Client Credentials |
✔ |
|||
Refresh Token |
✔ |
|||
Client Authentication Methods |
||||
HTTP Basic |
✔ |
✔ |
||
HTTP POST |
✔ |
✔ |
||
HTTP Client Support |
||||
RestTemplate |
✔ |
|||
WebClient |
||||
User Authentication |
||||
OAuth 2.0 Login (SSO) |
✔ |
✔ |
||
UserInfo Endpoint Support |
✔ |
✔ |
||
Access Token Usage |
||||
Token Relay |
✔ |
|||
Access Token Storage Management |
||||
In-Memory |
✔ |
|||
JDBC |
✔ |
Spring Security (5.0+) | Spring Security OAuth (2.2+) | Spring Cloud Security (1.2+) | Spring Boot OAuth2 (1.5.x) | |
---|---|---|---|---|
Access Token Formats |
||||
Opaque |
✔ |
|||
JSON Web Token (JWT) |
✔ |
|||
Access Token Verification |
||||
Opaque (using Introspection Endpoint) |
✔ |
|||
JSON Web Signature (MAC) |
✔ |
|||
JSON Web Signature (RSA) |
✔ |
|||
JSON Web Signature (using JSON Web Key) |
✔ |
|||
Custom JWT Claims Set Verifier |
✔ |
Spring Security (5.0+) | Spring Security OAuth (2.2+) | Spring Cloud Security (1.2+) | Spring Boot OAuth2 (1.5.x) | |
---|---|---|---|---|
Authorization Grants |
||||
Authorization Code |
✔ |
|||
Implicit |
✔ |
|||
Resource Owner Password Credentials |
✔ |
|||
Client Credentials |
✔ |
|||
Refresh Token |
✔ |
|||
Protocol Endpoints |
||||
Authorization Endpoint |
✔ |
|||
Token Endpoint |
✔ |
|||
User Approval Endpoint |
✔ |
|||
Introspection Endpoint |
✔ |
|||
Access Token Formats |
||||
Opaque |
✔ |
|||
JSON Web Signature (MAC) |
✔ |
|||
JSON Web Signature (RSA) |
✔ |
|||
Access Token Storage Management |
||||
In-Memory |
✔ |
|||
JDBC |
✔ |
|||
Redis |
✔ |
|||
Client Authentication Methods |
||||
HTTP Basic |
✔ |
|||
HTTP POST |
✔ |
|||
Client Registration Storage Management |
||||
JDBC |
✔ |
|||
Authorization Code Storage Management |
||||
In-Memory |
✔ |
|||
JDBC |
✔ |
|||
User Approval Storage Management |
||||
In-Memory |
✔ |
|||
JDBC |
✔ |