Skip to content

Commit 797e492

Browse files
author
Dave Syer
committed
Remove advice about not using "localhost" for client app
The context path is explicitly set to /client so the cookies are fine.
1 parent 1d29b2e commit 797e492

File tree

1 file changed

+7
-13
lines changed

1 file changed

+7
-13
lines changed

auth-server/README.adoc

Lines changed: 7 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -344,16 +344,10 @@ The `@EnableResourceServer` annotation creates a security filter with
344344
== Testing the OAuth2 Client
345345

346346
To test the new features you can just run both apps and visit
347-
127.0.0.1:9999 in your browser. The client app will redirect to the
348-
local Authorization Server, which then gives the user the usual choice
349-
of authentication with Facebook or Github. Once that is complete
350-
control returns to the test client, the local access token is granted
351-
and authentication is complete (you should see a "Hello" message in
352-
your browser). If you are already authenticated with Github or
353-
Facebook you may not even notice the remote authentication.
354-
355-
TIP: Don't use "localhost" for the test client app or it will steal
356-
cookies from the main app and mess up the authentication. If 127.0.0.1
357-
is not mapped to "localhost" you can set it up using your operating
358-
system (e.g. in "/etc/hosts"), or use another local address if there
359-
is one.
347+
http://localhost:9999/client in your browser. The client app will
348+
redirect to the local Authorization Server, which then gives the user
349+
the usual choice of authentication with Facebook or Github. Once that
350+
is complete control returns to the test client, the local access token
351+
is granted and authentication is complete (you should see a "Hello"
352+
message in your browser). If you are already authenticated with Github
353+
or Facebook you may not even notice the remote authentication.

0 commit comments

Comments
 (0)