title: Spring Boot 2.0.0 + OAuth2
body: <p>Does Spring Boot 2 + Sping Security OAuth2 still support the <code>@AuthorizationServer</code> annotation? From reading the release notes some things haven't been ported over: </p>
  
  <p><a href="https://github.com/spring-projects/spring-boot/wiki/Spring-Boot-2.0.0-M5-Release-Notes#oauth-20-support" rel="nofollow noreferrer">Oauth2 Support</a></p>
  
  <p>Here is the relevant section of my <code>build.grade</code>:</p>
  
  <p><strong>Auth Server</strong></p>
  
  <pre><code>// security
  compile "org.springframework.boot:spring-boot-starter-security:${springBootVersion}"
  // oauth
  // https://mvnrepository.com/artifact/org.springframework.security.oauth/spring-security-oauth2
  compile "org.springframework.security.oauth:spring-security-oauth2:2.2.1.RELEASE"
  </code></pre>
  
  <p><strong>Client Server</strong></p>
  
  <pre><code>// support for Oauth2 user token services not yet migrated into Spring Boot 2.0
  compile "org.springframework.security.oauth.boot:spring-security-oauth2-autoconfigure:2.0.1.BUILD-SNAPSHOT"
  </code></pre>
  
  <p>And right now my Authorization Server Oauth2 endpoints just return a 401 when i try to pass a client-id and client-secret in as <code>Basic Authentication</code> to <code>/oauth/token</code>. Passing in a username and password gives a different code path. So it looks like the OAuth filters aren't quite lined up.</p>
  
  <p>I also found this as well: <a href="https://stackoverflow.com/questions/48641560/spring-boot-2-oauth2-starter-changes">Spring Boot 2 OAuth2 starter changes</a>.</p>
  
  <p>Has there been a configuration update or do I need a different set of gradle dependencies to restore the Authorization Server to it's previous state?</p>
  
  <p>Thanks!</p>
  
  <hr>
  
  <p><strong>UPDATE</strong></p>
  
  <p>I wanted to close the loop on this question. In addition to encrypting the client-secrets. The RedisTokenStore issue has also been resolved as of Spring OAuth 2.3.2: <a href="https://spring.io/blog/2018/04/12/spring-security-oauth-2-3-2-released" rel="nofollow noreferrer">Spring OAuth 2.3.2</a></p>