Implement Token Endpoint

[jgrandja]

An authorization server provides a token endpoint, which the client uses to exchange an authorization grant for an access token.

The OAuth2TokenEndpointFilter should be implemented as a Filter. The DefaultAuthorizationCodeTokenResponseClient in the spring-security-oauth2-client module is the client that calls the Token Endpoint.

Implementation Requirements

• the Filter should process requests for the (default) path /oauth2/token
• authorizationGrantConverter should convert a valid authorization_code Access Token Request to OAuth2AuthorizationCodeAuthenticationToken Implement authorization_code AuthenticationProvider #68
• the OAuth2AuthorizationCodeAuthenticationToken should be passed to the AuthenticationManager
• the AuthenticationManager should be composed of OAuth2AuthorizationCodeAuthenticationProvider Implement authorization_code AuthenticationProvider #68
• OAuth2AccessTokenAuthenticationToken Implement authorization_code AuthenticationProvider #68 should be returned from AuthenticationManager
• the OAuth2AccessToken should be updated in the in-flight OAuth2Authorization Implement Authorization Model / Service #43
• javadoc class and public methods
• Unit tests

Specification References

3.1. Token Endpoint
4.1. Authorization Code Grant
4.1.3. Access Token Request
4.1.4. Access Token Response

[kratostaine]

@jgrandja May I pick this up?

[jgrandja]

Thank you @kratostaine. The issue is yours.