DanielK.66823 (Customer) asked a question.
Getting ID Token rather than access token
In advance: I'm a novice regarding security topics in general (and thus in OAuth2 as well) so it might be the case that I'm simply missing something or have some sort of a misunderstand (and it's likely that I might mistake some terms). Short description* Web app based upon Spring Boot 2.0.0.RELEASE and thus Spring Security 5* I'm using the authorization code flow (description: https://developer.okta.com/authentication-guide/implementing-authentication/auth-code)* I'm using the exactly same setup for Auth0 where it works (obviously credentials and urls are different) Security configuration
- spring: security: oauth2: client: registration: okta: client-id: '11111111111111111111' client-secret: '000011112222333344445555666677778888AAAA' authorization-grant-type: authorization_code redirect-uri-template: 'http://localhost:8080/login/oauth2/code/okta' scope: - openid - profile - email provider: okta: authorization-uri: 'https://myapp.oktapreview.com/oauth2/aaaabbbbccccddddeeee/v1/authorize' token-uri: 'https://myapp.oktapreview.com/oauth2/aaaabbbbccccddddeeee/v1/token' user-info-uri: 'https://myapp.oktapreview.com/oauth2/aaaabbbbccccddddeeee/v1/userinfo' jwk-set-uri: 'https://myapp.oktapreview.com/oauth2/aaaabbbbccccddddeeee/v1/keys'
