Skip to content

Commit 0d5f42f

Browse files
therepanicjgrandja
authored andcommitted
Remove requireProofKey warning for non-auth-code flows
The warning is unnecessary since PKCE only applies to authorization_code flow and the code already corrects this silently. Closes: gh-18221 Signed-off-by: Andrey Litvitski <[email protected]>
1 parent 4d9d40e commit 0d5f42f

File tree

1 file changed

+0
-3
lines changed

1 file changed

+0
-3
lines changed

oauth2/oauth2-client/src/main/java/org/springframework/security/oauth2/client/registration/ClientRegistration.java

Lines changed: 0 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -705,9 +705,6 @@ private void validateAuthorizationGrantTypes() {
705705
if (!AuthorizationGrantType.AUTHORIZATION_CODE.equals(this.authorizationGrantType)
706706
&& this.clientSettings.isRequireProofKey()) {
707707
this.clientSettings = ClientSettings.builder().requireProofKey(false).build();
708-
logger.warn(LogMessage.format(
709-
"clientSettings.isRequireProofKey=true is only valid with authorizationGrantType=%s. Got authorizationGrantType=%s. Resetting to clientSettings.isRequireProofKey=false",
710-
AuthorizationGrantType.AUTHORIZATION_CODE, this.authorizationGrantType));
711708
}
712709
}
713710

0 commit comments

Comments
 (0)