Adapt to form data not adding charset if it is UTF-8 about spring-security

[sjohnr]

If you are impacted by this issue, please consider adding a comment letting us know how you were impacted. This will help us understand if any environments are affected by removing charset parameter of the Content-Type header.

---

The following is a workaround that can be applied to restore the charset parameter of the Content-Type header for the authorization_code grant.

@Configuration
@EnableWebFluxSecurity
public class SecurityConfiguration {

	...

	@Bean
	public ReactiveOAuth2AccessTokenResponseClient<OAuth2AuthorizationCodeGrantRequest> authorizationCodeTokenResponseClient() {
		var defaultHeadersConverter = new DefaultOAuth2TokenRequestHeadersConverter<OAuth2AuthorizationCodeGrantRequest>();
		var headersConverter = defaultHeadersConverter
			.andThen((headers) -> {
				headers.setContentType(new MediaType(MediaType.APPLICATION_FORM_URLENCODED, StandardCharsets.UTF_8));
				return headers;
			});

		var tokenResponseClient = new WebClientReactiveAuthorizationCodeTokenResponseClient();
		tokenResponseClient.setHeadersConverter(headersConverter);

		return tokenResponseClient;
	}

}

See the Customize Token Request Parameters section in the reference for information on customizing other grant types.

[marcusdacoregio]

Closed via aa9c1ba