[CXF-6489] Cannot set ClientSecretVerifier in AbstractTokenService

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.1.1
• Fix Version/s: 3.0.6, 3.1.2
• Component/s: JAX-RS Security
• Labels: oauth2 security
• Estimated Complexity: Unknown
• Assignee: Sergey Beryozkin
• Reporter: Berto Murillo
• Created: 08/Jul/15 14:27
• Updated: 14/Oct/16 14:28
• Resolved: 08/Jul/15 14:41

Description

A field was added to org.apache.cxf.rs.security.oauth2.services.AbstractTokenService:

private ClientSecretVerifier clientSecretVerifier;

But no setter was added with it. When I tried to set it via the context XML like such:

    <bean id="hashedSecretVerifier" class="org.apache.cxf.rs.security.oauth2.provider.ClientSecretHashVerifier" />

    <bean id="accessTokenService" class="org.apache.cxf.rs.security.oauth2.services.AccessTokenService">
        ...
        <property name="clientSecretVerifier" ref="hashedSecretVerifier" />
        ...
    </bean>

I get a failure when the application attempts to start. Removing it resolves the issue.