Skip to content

Token Introspecting Client Config

srmoore edited this page Jul 8, 2013 · 7 revisions

The following code sets up a filter to take a token passed in to the web application, and fill in the details as an OAuth2Authentication object by introspecting it with the IDP.

In applicationContext.xml:

    <oauth:resource-server id="resourceServerFilter" token-services-ref="IntrospectingService" />
    <bean id="IntrospectingService" class="org.mitre.oauth2.introspectingfilter.IntrospectingTokenService">
        <property name="clientId" value="yourClientId"/>
        <property name="clientSecret" value="yourClientSecret"/>
        <property name="introspectionUrl" value="${idp.url}introspect"/>
    </bean>