@christiangoudreau, although I think this should work, I don’t think this would work since adding this RequestCache
currently only affects the OAuth2AuthorizationRequestRedirectWebFilter
and not the RedirectServerAuthenticationEntryPoint
. See https://github.com/spring-projects/spring-security/blob/5.2.1.RELEASE/config/src/main/java/org/springframework/security/config/web/server/ServerHttpSecurity.java#L1184
I’ve created an issue for this on spring-security: https://github.com/spring-projects/spring-security/issues/7721