-
Couldn't load subscription status.
- Fork 1.4k
Closed
Description
Describe the bug
On the sample project: spring-security-samples-boot-oauth2-integrated-authorizationserver-custom-consent-page, upon landing on the custom consent page, the 'Cancel' button does not submit the consent form, but rather clears all form elements, as it is set to type=reset. This issue also extends to the default consent page as defined in OAuth2AuthorizationEndpointFilter class.
Looks like the specific change was introduced in commit 7b4fc46
To Reproduce
- Launch module:
spring-security-samples-boot-oauth2-integrated-authorizationserver-custom-consent-pageand adjacent sample client and resource server - Navigate to sample client (localhost:8080)
- Log in with
user1andpassword - Be redirected back to sample client home page
- Click on
authorization codegrant type - Be redirected to Consent page
- Click on 'Cancel' button
Expected behavior
The form is submitted and user is redirected back to client with no scopes approved.
Metadata
Metadata
Assignees
Labels
type: bugA general bugA general bug