Announcement Announcement Module
Collapse
No announcement yet.
Extend Spring Social core to support OpenId Connect Page Title Module
Move Remove Collapse
X
Conversation Detail Module
Collapse
  • Filter
  • Time
  • Show
Clear All
new posts

  • Extend Spring Social core to support OpenId Connect

    Hi Craig,

    I wanted to check with you whether spring social community has plans to extend social-core to support openid connect specification in future. If I fork spring-social core and add openid connect support, will you accept it?

    PayPal supports only OpenId Connect specs now and I have built an extension to support the same. Please find below source code for the same here

    I have achieved support of OpenIdConnect by extending OAuth2 base classes and providing a different sql script.
    I am not sure whether this is right approach. Can you please let me know your thoughts?

    Thanks
    Abhijith

  • #2
    I'm certainly open to any pull requests that are submitted. So yeah, feel free to fork it and then submit a PR and I'll consider it.

    OpenIdConnect is really just OAuth2-based pseudo-authentication (not much different than what ProviderSignInController does), only with a more well-defined interaction between the client and the provider. So, yes, I would think that OpenIdConnect support would be based on the existing OAuth2 support.

    Comment


    • #3
      Major difference I saw is that OpenId Connect has a notion of id_token which is not present in OAuth2 specification. I had to provide a separate sql script to include another column and override couple of classes from OAuth2 to accommodate this. This token is used to 'endsession' which is important for a payment transaction.

      More info on end session endpoint can be found at https://developer.paypal.com/webapps...ect/#endpoints

      Details specifying id_token can be found here: http://openid.net/specs/openid-conne...zationEndpoint

      Comment

      Working...
      X