hsiegeln d7563902a7 fix: read oidcTlsSkipVerify at call time instead of caching in constructor ...

OidcTokenExchanger cached securityProperties.isOidcTlsSkipVerify() in
the constructor as a boolean field. If Spring constructed the bean
before property binding completed, the cached value was false even when
the env var was set. SecurityConfig worked because it read the property
at call time. Now OidcTokenExchanger stores the SecurityProperties
reference and reads the flag on each call, matching SecurityConfig's
pattern.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-06 01:02:36 +02:00

..

src

fix: read oidcTlsSkipVerify at call time instead of caching in constructor

2026-04-06 01:02:36 +02:00

pom.xml

feat: add spring-boot-starter-oauth2-resource-server and OIDC properties

2026-04-05 13:06:53 +02:00