diff --git a/security-resource-server-default-jwt-configuration/src/main/kotlin/ru/touchin/auth/security/jwt/http/configurators/JwtHttpSecurityConfigurator.kt b/security-resource-server-default-jwt-configuration/src/main/kotlin/ru/touchin/auth/security/jwt/http/configurators/JwtHttpSecurityConfigurator.kt index 6b8fca4..0fbd8b3 100644 --- a/security-resource-server-default-jwt-configuration/src/main/kotlin/ru/touchin/auth/security/jwt/http/configurators/JwtHttpSecurityConfigurator.kt +++ b/security-resource-server-default-jwt-configuration/src/main/kotlin/ru/touchin/auth/security/jwt/http/configurators/JwtHttpSecurityConfigurator.kt @@ -2,6 +2,7 @@ package ru.touchin.auth.security.jwt.http.configurators import org.springframework.core.annotation.Order import org.springframework.security.config.annotation.web.builders.HttpSecurity +import org.springframework.security.oauth2.server.resource.web.DefaultBearerTokenResolver import org.springframework.stereotype.Component import ru.touchin.common.spring.Ordered import ru.touchin.common.spring.security.http.configurators.HttpSecurityConfigurator @@ -11,9 +12,10 @@ import ru.touchin.common.spring.security.http.configurators.HttpSecurityConfigur class JwtHttpSecurityConfigurator : HttpSecurityConfigurator { override fun configure(http: HttpSecurity) { - http.oauth2ResourceServer { - it.jwt() - } + val resolver = DefaultBearerTokenResolver() + resolver.setAllowUriQueryParameter(true) + + http.oauth2ResourceServer().bearerTokenResolver(resolver).jwt() } }