From b29ac37db677b9e4035b78e21205f9a1f8b597a5 Mon Sep 17 00:00:00 2001 From: Madhura Bhave Date: Tue, 22 Dec 2020 12:13:17 -0800 Subject: [PATCH] Add docs about using InMemoryOAuth2AuthorizedClientService Closes gh-24596 --- .../src/docs/asciidoc/spring-boot-features.adoc | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/spring-boot-project/spring-boot-docs/src/docs/asciidoc/spring-boot-features.adoc b/spring-boot-project/spring-boot-docs/src/docs/asciidoc/spring-boot-features.adoc index 9e941a38c4..1f7b93d8ac 100644 --- a/spring-boot-project/spring-boot-docs/src/docs/asciidoc/spring-boot-features.adoc +++ b/spring-boot-project/spring-boot-docs/src/docs/asciidoc/spring-boot-features.adoc @@ -3450,6 +3450,10 @@ public class OAuth2LoginSecurityConfig extends WebSecurityConfigurerAdapter { } ---- +TIP: Spring Boot auto-configures an `InMemoryOAuth2AuthorizedClientService` which is used by Spring Security for the management of client registrations. +The `InMemoryOAuth2AuthorizedClientService` has limited capabilities and we recommend using it only for development environments. +For production environments, consider using a `JdbcOAuth2AuthorizedClientService` or creating your own implementation of `OAuth2AuthorizedClientService`. + [[boot-features-security-oauth2-common-providers]]