Describe the bug When we try to override the default redirect uri in application.yml. i expected it to two things: 1. To associate OAuth2LoginAuthenticationFilter with request pattern mentioned in the redirect-uri property 2. To send this value as redirect_uri value in the authorization request to provider. But, the observation is, it is performing only point #2 above, but still associated OAuth2LoginAuthenticationFilter with default redirect uri which is {}baseUri}/login/oauth2/code/{registrationId}
To Reproduce Override the redirect-uri like this:
and permit the url like this in the security configuration:
With this, start the application and try to login and access any protected web page
Expected behavior Below two things should happen 1. To associate OAuth2LoginAuthenticationFilter with request pattern mentioned in the redirect-uri property 2. To send this value as redirect_uri value in the authorization request to provider.
And we should be able to login successfully and access any protected web page
Spring Boot version: 3.5.3 Spring Security version: 6.5.1 Java version: 17