Use ProviderSettings in OAuth2AuthorizationServerConfigurer

[florianberthe]

Hello,

Happy new year !

I probably found a bug in OAuth2AuthorizationServerConfigurer class.
The tokenEndpoint and tokenRevocationEndpoint properties from ProviderSettings are not used in OAuth2ClientAuthenticationFilter for :

• creation of OAuth2ClientAuthenticationFilter
• creation of DelegatingAuthenticationEntryPoint

As a result, using custom urls for both endpoints doesn't work at all.

Thank you for your support.

Flo

[jgrandja]

Thanks for the report @florianberthe.

Maybe you missed the comment in the code?

I'm planning on resolving this in the upcoming 0.1.0 release.

NOTE: ProviderSettings was recently added and so I added the TODO to not forget for 0.1.0.

[florianberthe]

@jgrandja I've already read the comment before but as it is only written in getEndpointMatchers(), I prefered creating an issue then a fix.