[GitHub] [nifi] exceptionfactory commented on a diff in pull request #6637: NIFI-10177: implemented ID token logout and revoke access token logou…

[GitBox <gi...@apache.org>]

exceptionfactory commented on code in PR #6637:
URL: https://github.com/apache/nifi/pull/6637#discussion_r1028539817


##########
nifi-registry/nifi-registry-core/nifi-registry-web-api/src/main/java/org/apache/nifi/registry/web/api/AccessResource.java:
##########
@@ -119,6 +137,7 @@ public AccessResource(
         this.oidcService = oidcService;
         this.kerberosSpnegoIdentityProvider = kerberosSpnegoIdentityProvider;
         this.identityProvider = identityProvider;
+        this.bearerTokenResolver = new DefaultBearerTokenResolver();

Review Comment:
   @thenatog Not necessarily in this case, because the `StandardBearerTokenResolver` also looks at the Cookie, which is not necessary for Registry.



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@nifi.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org