Skip to content

Instantly share code, notes, and snippets.

@sandipchitale
Last active July 11, 2023 20:38
Show Gist options
  • Save sandipchitale/e5230aca9d2affd9d1e3e56a00c43808 to your computer and use it in GitHub Desktop.
Save sandipchitale/e5230aca9d2affd9d1e3e56a00c43808 to your computer and use it in GitHub Desktop.
OAuth2 Filter Chains #oauth2-security-filter-chains
Begin Filters ============================
URL: GET /oauth2/jwks
Filter Name: filters FilterClass: com.example.authserver.DumpFiltersConfig$DumpFilters
Filter Name: characterEncodingFilter FilterClass: org.springframework.boot.web.servlet.filter.OrderedCharacterEncodingFilter
Filter Name: formContentFilter FilterClass: org.springframework.boot.web.servlet.filter.OrderedFormContentFilter
Filter Name: requestContextFilter FilterClass: org.springframework.boot.web.servlet.filter.OrderedRequestContextFilter
Filter Name: springSecurityFilterChain FilterClass: org.springframework.boot.web.servlet.DelegatingFilterProxyRegistrationBean$1
Begin Filter Chains ============================
org.springframework.security.oauth2.server.authorization.config.annotation.web.configurers.OAuth2AuthorizationServerConfigurer$$Lambda$830/0x0000000801015988@482c351d
Or
Or
Ant [pattern='/oauth2/token', POST]
Ant [pattern='/oauth2/introspect', POST]
Ant [pattern='/oauth2/revoke', POST]
Ant [pattern='/oauth2/device_authorization', POST]
Ant [pattern='/.well-known/oauth-authorization-server', GET]
Or
Ant [pattern='/oauth2/authorize', GET]
Ant [pattern='/oauth2/authorize', POST]
Ant [pattern='/oauth2/token', POST]
Ant [pattern='/oauth2/introspect', POST]
Ant [pattern='/oauth2/revoke', POST]
Ant [pattern='/oauth2/device_authorization', POST]
Or
Ant [pattern='/oauth2/device_verification', GET]
Ant [pattern='/oauth2/device_verification', POST]
Or
Ant [pattern='/.well-known/openid-configuration', GET]
Or
Ant [pattern='/connect/logout', GET]
Ant [pattern='/connect/logout', POST]
Or
Ant [pattern='/userinfo', GET]
Ant [pattern='/userinfo', POST]
Ant [pattern='/oauth2/jwks', GET]
GET /oauth2/jwks Matched
org.springframework.security.web.session.DisableEncodeUrlFilter@75eaba95
org.springframework.security.web.context.request.async.WebAsyncManagerIntegrationFilter@320be73
org.springframework.security.web.context.SecurityContextHolderFilter@27a6fef2
org.springframework.security.oauth2.server.authorization.config.annotation.web.configurers.AuthorizationServerContextFilter@16bd7ae1
org.springframework.security.web.header.HeaderWriterFilter@6a55594b
org.springframework.security.web.csrf.CsrfFilter@2eda2062
org.springframework.security.oauth2.server.authorization.oidc.web.OidcLogoutEndpointFilter@291a4791
org.springframework.security.web.authentication.logout.LogoutFilter@d5e575c
org.springframework.security.oauth2.server.authorization.web.OAuth2AuthorizationServerMetadataEndpointFilter@28a6e171
org.springframework.security.oauth2.server.authorization.web.OAuth2AuthorizationEndpointFilter@cc9ef8d
org.springframework.security.oauth2.server.authorization.web.OAuth2DeviceVerificationEndpointFilter@4966bab1
org.springframework.security.oauth2.server.authorization.oidc.web.OidcProviderConfigurationEndpointFilter@26c8b296
org.springframework.security.oauth2.server.authorization.web.NimbusJwkSetEndpointFilter@21f7e537
org.springframework.security.oauth2.server.authorization.web.OAuth2ClientAuthenticationFilter@7c1503a3
org.springframework.security.oauth2.server.resource.web.authentication.BearerTokenAuthenticationFilter@284bdeed
org.springframework.security.web.savedrequest.RequestCacheAwareFilter@2dba05b1
org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestFilter@5e1a5f
org.springframework.security.web.authentication.AnonymousAuthenticationFilter@435e416c
org.springframework.security.web.access.ExceptionTranslationFilter@66e827a8
org.springframework.security.web.access.intercept.AuthorizationFilter@5bda157e
org.springframework.security.oauth2.server.authorization.web.OAuth2TokenEndpointFilter@685f5d0d
org.springframework.security.oauth2.server.authorization.web.OAuth2TokenIntrospectionEndpointFilter@35145874
org.springframework.security.oauth2.server.authorization.web.OAuth2TokenRevocationEndpointFilter@646cd766
org.springframework.security.oauth2.server.authorization.web.OAuth2DeviceAuthorizationEndpointFilter@374c40ba
org.springframework.security.oauth2.server.authorization.oidc.web.OidcUserInfoEndpointFilter@251d7fdd
any request
org.springframework.security.web.session.DisableEncodeUrlFilter@2c2c3947
org.springframework.security.web.context.request.async.WebAsyncManagerIntegrationFilter@4a62062a
org.springframework.security.web.context.SecurityContextHolderFilter@6424e613
org.springframework.security.web.header.HeaderWriterFilter@a0c5be
org.springframework.security.web.csrf.CsrfFilter@68631b1d
org.springframework.security.web.authentication.logout.LogoutFilter@24a0c58b
org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter@183fc2fa
org.springframework.security.web.authentication.ui.DefaultLoginPageGeneratingFilter@e62319f
org.springframework.security.web.authentication.ui.DefaultLogoutPageGeneratingFilter@7ec08115
org.springframework.security.web.savedrequest.RequestCacheAwareFilter@14efa279
org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestFilter@8e99809
org.springframework.security.web.authentication.AnonymousAuthenticationFilter@53dd42d6
org.springframework.security.web.access.ExceptionTranslationFilter@5a48da4f
org.springframework.security.web.access.intercept.AuthorizationFilter@7f3c0399
End Filter Chains ==============================
Filter Name: Tomcat WebSocket (JSR356) Filter FilterClass: org.apache.tomcat.websocket.server.WsFilter
End Filters ==============================
Begin Filters ============================
URL: GET /
Filter Name: filters FilterClass: com.example.authclient.DumpFiltersConfig$DumpFilters
Filter Name: characterEncodingFilter FilterClass: org.springframework.boot.web.servlet.filter.OrderedCharacterEncodingFilter
Filter Name: formContentFilter FilterClass: org.springframework.boot.web.servlet.filter.OrderedFormContentFilter
Filter Name: requestContextFilter FilterClass: org.springframework.boot.web.servlet.filter.OrderedRequestContextFilter
Filter Name: springSecurityFilterChain FilterClass: org.springframework.boot.web.servlet.DelegatingFilterProxyRegistrationBean$1
Begin Filter Chains ============================
any request
GET / Matched
org.springframework.security.web.session.DisableEncodeUrlFilter@3a8cea24
org.springframework.security.web.context.request.async.WebAsyncManagerIntegrationFilter@1eb9a3ef
org.springframework.security.web.context.SecurityContextHolderFilter@38f981b6
org.springframework.security.web.header.HeaderWriterFilter@1ca3d25b
org.springframework.security.web.csrf.CsrfFilter@7a9ceddf
org.springframework.security.web.authentication.logout.LogoutFilter@1e8fb66f
org.springframework.security.oauth2.client.web.OAuth2AuthorizationRequestRedirectFilter@6588b715
org.springframework.security.oauth2.client.web.OAuth2AuthorizationRequestRedirectFilter@52c9d3d0
org.springframework.security.oauth2.client.web.OAuth2LoginAuthenticationFilter@15a3b42
org.springframework.security.web.authentication.ui.DefaultLoginPageGeneratingFilter@da4cf09
org.springframework.security.web.authentication.ui.DefaultLogoutPageGeneratingFilter@5d318e91
org.springframework.security.web.savedrequest.RequestCacheAwareFilter@7bbfc5ff
org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestFilter@64b70f41
org.springframework.security.web.authentication.AnonymousAuthenticationFilter@298b64f7
org.springframework.security.oauth2.client.web.OAuth2AuthorizationCodeGrantFilter@7b2bf745
org.springframework.security.web.access.ExceptionTranslationFilter@3aed69dd
org.springframework.security.web.access.intercept.AuthorizationFilter@47829d6d
End Filter Chains ==============================
Filter Name: Tomcat WebSocket (JSR356) Filter FilterClass: org.apache.tomcat.websocket.server.WsFilter
End Filters ==============================
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment