Skip to content

Fix to return client_secret_expires_at in client registration response #2134

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 2 commits into
base: main
Choose a base branch
from

Conversation

wheleph
Copy link

@wheleph wheleph commented Aug 1, 2025

Closes gh-2111

@spring-projects-issues spring-projects-issues added the status: waiting-for-triage An issue we've not yet triaged label Aug 1, 2025
@wheleph wheleph changed the title Pass client_secret_expires_at Return client_secret_expires_at in Dynamic Client Registration response body Aug 1, 2025
@wheleph
Copy link
Author

wheleph commented Aug 1, 2025

@jgrandja please have a look at the change.

Looking forward to your feedback :)

@jgrandja
Copy link
Collaborator

jgrandja commented Aug 8, 2025

Thanks @wheleph.

I have a couple of high priority tasks that I'm currently working on so I just wanted to let you know that I will review this soon.

@jgrandja jgrandja added type: enhancement A general enhancement type: bug A general bug and removed status: waiting-for-triage An issue we've not yet triaged type: enhancement A general enhancement labels Aug 8, 2025
@wheleph
Copy link
Author

wheleph commented Aug 8, 2025

I appreciate your transparency.

No worries, take your time :)

@jgrandja jgrandja changed the title Return client_secret_expires_at in Dynamic Client Registration response body Return client_secret_expires_at in Dynamic Client Registration response Aug 13, 2025
@jgrandja jgrandja changed the title Return client_secret_expires_at in Dynamic Client Registration response Return client_secret_expires_at in client registration response Aug 13, 2025
@jgrandja jgrandja self-assigned this Aug 13, 2025
@jgrandja jgrandja added this to the 1.4.5 milestone Aug 13, 2025
Copy link
Collaborator

@jgrandja jgrandja left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for the PR @wheleph. Please see review comments.


OidcClientRegistration clientRegistrationResponse = registerClient(clientRegistration);

var expectedSecretExpiryDate = Instant.now().plus(Duration.ofHours(24));
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This project does not make use of var so to keep things consistent please use the type

@@ -643,8 +685,40 @@ public SecurityFilterChain authorizationServerSecurityFilterChain(HttpSecurity h

@EnableWebSecurity
@Configuration(proxyBeanMethods = false)
static class CustomClientMetadataConfiguration extends AuthorizationServerConfiguration {
static class CustomClientMetadataConfiguration extends ClientRegistrationConvertersConfiguration {
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I appreciate taking advantage of reuse but there are too many changes applied to other tests and the preference is to isolate the changes to only the issue at hand. Also, I am totally ok with code duplication in tests and keeping things isolated. Please revert all unrelated changes and isolate to only the issue at hand.

Signed-off-by: wheleph <[email protected]>
@wheleph
Copy link
Author

wheleph commented Aug 16, 2025

@jgrandja I've applied your suggestions.

Please have a look and let me know if you have any other concerns

@jgrandja jgrandja changed the title Return client_secret_expires_at in client registration response Fix to return client_secret_expires_at in client registration response Aug 19, 2025
@jgrandja jgrandja removed this from the 1.4.5 milestone Aug 19, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
type: bug A general bug
Projects
None yet
Development

Successfully merging this pull request may close these issues.

client_secret_expires_at is not populated in /connect/register response
3 participants