{"action":"created","comment":{"url":"https://api.github.com/repos/spring-projects/spring-security/pulls/comments/199921190","pull_request_review_id":134055043,"id":199921190,"node_id":"MDI0OlB1bGxSZXF1ZXN0UmV2aWV3Q29tbWVudDE5OTkyMTE5MA==","diff_hunk":"@@ -0,0 +1,237 @@\n+/*\n+ * Copyright 2002-2018 the original author or authors.\n+ *\n+ * Licensed under the Apache License, Version 2.0 (the \"License\");\n+ * you may not use this file except in compliance with the License.\n+ * You may obtain a copy of the License at\n+ *\n+ *      http://www.apache.org/licenses/LICENSE-2.0\n+ *\n+ * Unless required by applicable law or agreed to in writing, software\n+ * distributed under the License is distributed on an \"AS IS\" BASIS,\n+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n+ * See the License for the specific language governing permissions and\n+ * limitations under the License.\n+ */\n+\n+package org.springframework.security.config.annotation.web.configurers.oauth2.server.resource;\n+\n+import javax.servlet.http.HttpServletRequest;\n+\n+import org.springframework.beans.factory.BeanCreationException;\n+import org.springframework.security.authentication.AuthenticationManager;\n+import org.springframework.security.authentication.AuthenticationProvider;\n+import org.springframework.security.config.annotation.web.HttpSecurityBuilder;\n+import org.springframework.security.config.annotation.web.configurers.AbstractHttpConfigurer;\n+import org.springframework.security.config.annotation.web.configurers.CsrfConfigurer;\n+import org.springframework.security.config.annotation.web.configurers.ExceptionHandlingConfigurer;\n+import org.springframework.security.config.http.SessionCreationPolicy;\n+import org.springframework.security.oauth2.jwt.JwtDecoder;\n+import org.springframework.security.oauth2.jwt.NimbusJwtDecoderJwkSupport;\n+import org.springframework.security.oauth2.server.resource.authentication.JwtAuthenticationProvider;\n+import org.springframework.security.oauth2.server.resource.web.BearerTokenAuthenticationEntryPoint;\n+import org.springframework.security.oauth2.server.resource.web.BearerTokenAuthenticationFilter;\n+import org.springframework.security.oauth2.server.resource.web.BearerTokenResolver;\n+import org.springframework.security.oauth2.server.resource.web.DefaultBearerTokenResolver;\n+import org.springframework.security.oauth2.server.resource.web.access.BearerTokenAccessDeniedHandler;\n+import org.springframework.security.web.authentication.www.BasicAuthenticationFilter;\n+import org.springframework.security.web.util.matcher.RequestMatcher;\n+import org.springframework.util.Assert;\n+\n+/**\n+ *\n+ * An {@link AbstractHttpConfigurer} for OAuth 2.0 Resource Server Support.\n+ *\n+ * By default, this wires a {@link BearerTokenAuthenticationFilter}, which can be used to parse the request\n+ * for bearer tokens and make an authentication attempt.\n+ *\n+ * <p>\n+ * The following configuration options are available:\n+ *\n+ * <ul>\n+ * <li>{@link #jwt()} - enables Jwt-encoded bearer token support</li>\n+ * </ul>\n+ *\n+ * <p>\n+ * When using {@link #jwt()}, a Jwk Set Uri must be supplied via {@link JwtConfigurer#jwkSetUri}\n+ *\n+ * <h2>Security Filters</h2>\n+ *\n+ * The following {@code Filter}s are populated when {@link #jwt()} is configured:\n+ *\n+ * <ul>\n+ * <li>{@link BearerTokenAuthenticationFilter}</li>\n+ * </ul>\n+ *\n+ * <h2>Shared Objects Created</h2>\n+ *\n+ * The following shared objects are populated:\n+ *\n+ * <ul>\n+ * <li>{@link SessionCreationPolicy} (optional)</li>\n+ * </ul>\n+ *\n+ * <h2>Shared Objects Used</h2>\n+ *\n+ * The following shared objects are used:\n+ *\n+ * <ul>\n+ * <li>{@link AuthenticationManager}</li>\n+ * </ul>\n+ *\n+ * If {@link #jwt()} isn't supplied, then the {@link BearerTokenAuthenticationFilter} is still added, but without\n+ * any OAuth 2.0 {@link AuthenticationProvider}s. This is useful if needing to switch out Spring Security's Jwt support\n+ * for a custom one.\n+ *\n+ * @author Josh Cummings\n+ * @since 5.1\n+ * @see BearerTokenAuthenticationFilter\n+ * @see JwtAuthenticationProvider\n+ * @see NimbusJwtDecoderJwkSupport\n+ * @see AbstractHttpConfigurer\n+ */\n+public final class OAuth2ResourceServerConfigurer<H extends HttpSecurityBuilder<H>> extends\n+\t\tAbstractHttpConfigurer<OAuth2ResourceServerConfigurer<H>, H> {\n+\n+\tprivate BearerTokenResolver resolver = new DefaultBearerTokenResolver();\n+\tprivate BearerTokenRequestMatcher matcher = new BearerTokenRequestMatcher();\n+\n+\tprivate BearerTokenAuthenticationEntryPoint entryPoint = new BearerTokenAuthenticationEntryPoint();\n+\tprivate BearerTokenAccessDeniedHandler deniedHandler = new BearerTokenAccessDeniedHandler();\n+\n+\tprivate JwtConfigurer jwtConfigurer;\n+\n+\tpublic JwtConfigurer jwt() {\n+\t\tif (this.jwtConfigurer == null) {\n+\t\t\tthis.jwtConfigurer = new JwtConfigurer();\n+\t\t}\n+\n+\t\treturn this.jwtConfigurer;\n+\t}\n+\n+\t@Override\n+\tpublic void setBuilder(H http) {\n+\t\tsuper.setBuilder(http);\n+\t\tinitSessionCreationPolicy(http);\n+\t}\n+\n+\t@Override\n+\tpublic void init(H http) throws Exception {\n+\t\tregisterDefaultAccessDeniedHandler(http);\n+\t\tregisterDefaultEntryPoint(http);\n+\t\tregisterDefaultCsrfOverride(http);\n+\t}\n+\n+\t@Override\n+\tpublic void configure(H http) throws Exception {\n+\t\tBearerTokenResolver resolver = getBearerTokenResolver(http);\n+\t\tresolver = postProcess(resolver);\n+\t\tthis.matcher.setResolver(resolver);\n+\n+\t\tAuthenticationManager manager = http.getSharedObject(AuthenticationManager.class);\n+\n+\t\tBearerTokenAuthenticationFilter filter =\n+\t\t\t\tnew BearerTokenAuthenticationFilter(manager);\n+\t\tfilter.setBearerTokenResolver(resolver);\n+\t\tfilter = postProcess(filter);\n+\n+\t\thttp.addFilterBefore(filter, BasicAuthenticationFilter.class);\n+\n+\t\tif (this.jwtConfigurer != null) {\n+\t\t\tJwtDecoder decoder = getJwtDecoder(http);\n+\n+\t\t\tif (decoder != null) {\n+\t\t\t\tdecoder = postProcess(decoder);\n+\n+\t\t\t\tJwtAuthenticationProvider provider =\n+\t\t\t\t\t\tnew JwtAuthenticationProvider(decoder);\n+\t\t\t\tprovider = postProcess(provider);\n+\n+\t\t\t\thttp.authenticationProvider(provider);\n+\n+\t\t\t} else {\n+\t\t\t\tthrow new BeanCreationException(\"Jwt is the only supported format for bearer tokens \" +\n+\t\t\t\t\t\t\"in Spring Security and no instance of JwtDecoder could be found. Make sure to specify \" +\n+\t\t\t\t\t\t\"a jwk set uri by doing http.oauth2().resourceServer().jwt().jwkSetUri(uri)\");\n+\t\t\t}\n+\t\t}\n+\t}\n+\n+\tpublic class JwtConfigurer {\n+\t\tprivate String jwkSetUri;\n+\n+\t\tJwtConfigurer() {}\n+\n+\t\tpublic OAuth2ResourceServerConfigurer<H> jwkSetUri(String uri) {","path":"config/src/main/java/org/springframework/security/config/annotation/web/configurers/oauth2/server/resource/OAuth2ResourceServerConfigurer.java","position":165,"original_position":165,"commit_id":"48cb2e996c0a95755bfffa0018efd148cb09e160","original_commit_id":"48cb2e996c0a95755bfffa0018efd148cb09e160","user":{"login":"rwinch","id":362503,"node_id":"MDQ6VXNlcjM2MjUwMw==","avatar_url":"https://avatars0.githubusercontent.com/u/362503?v=4","gravatar_id":"","url":"https://api.github.com/users/rwinch","html_url":"https://github.com/rwinch","followers_url":"https://api.github.com/users/rwinch/followers","following_url":"https://api.github.com/users/rwinch/following{/other_user}","gists_url":"https://api.github.com/users/rwinch/gists{/gist_id}","starred_url":"https://api.github.com/users/rwinch/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rwinch/subscriptions","organizations_url":"https://api.github.com/users/rwinch/orgs","repos_url":"https://api.github.com/users/rwinch/repos","events_url":"https://api.github.com/users/rwinch/events{/privacy}","received_events_url":"https://api.github.com/users/rwinch/received_events","type":"User","site_admin":false},"body":"Change this method to set a JwkDecoder vs keeping track of the uri. For example:\r\n\r\n```java\r\nthis.jwtDecoder = new NimbusJwtDecoderJwkSupport(uri);\r\n```\r\n\r\nThis is more flexible for the future without the need to keep track of as many member variables.","created_at":"2018-07-03T19:09:41Z","updated_at":"2018-07-03T19:57:04Z","html_url":"https://github.com/spring-projects/spring-security/pull/5476#discussion_r199921190","pull_request_url":"https://api.github.com/repos/spring-projects/spring-security/pulls/5476","author_association":"MEMBER","_links":{"self":{"href":"https://api.github.com/repos/spring-projects/spring-security/pulls/comments/199921190"},"html":{"href":"https://github.com/spring-projects/spring-security/pull/5476#discussion_r199921190"},"pull_request":{"href":"https://api.github.com/repos/spring-projects/spring-security/pulls/5476"}}},"pull_request":{"url":"https://api.github.com/repos/spring-projects/spring-security/pulls/5476","id":198768138,"node_id":"MDExOlB1bGxSZXF1ZXN0MTk4NzY4MTM4","html_url":"https://github.com/spring-projects/spring-security/pull/5476","diff_url":"https://github.com/spring-projects/spring-security/pull/5476.diff","patch_url":"https://github.com/spring-projects/spring-security/pull/5476.patch","issue_url":"https://api.github.com/repos/spring-projects/spring-security/issues/5476","number":5476,"state":"open","locked":false,"title":"Resource Server JWK support","user":{"login":"jzheaux","id":3627351,"node_id":"MDQ6VXNlcjM2MjczNTE=","avatar_url":"https://avatars0.githubusercontent.com/u/3627351?v=4","gravatar_id":"","url":"https://api.github.com/users/jzheaux","html_url":"https://github.com/jzheaux","followers_url":"https://api.github.com/users/jzheaux/followers","following_url":"https://api.github.com/users/jzheaux/following{/other_user}","gists_url":"https://api.github.com/users/jzheaux/gists{/gist_id}","starred_url":"https://api.github.com/users/jzheaux/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jzheaux/subscriptions","organizations_url":"https://api.github.com/users/jzheaux/orgs","repos_url":"https://api.github.com/users/jzheaux/repos","events_url":"https://api.github.com/users/jzheaux/events{/privacy}","received_events_url":"https://api.github.com/users/jzheaux/received_events","type":"User","site_admin":false},"body":"Introduce support for OAuth 2.0 Bearer Token Authentication with JWT-encoded bearer tokens. This includes support for remote JWK set signature verification.\r\n\r\n#5121 \r\n#5125 \r\n#5128 \r\n#5130 \r\n#5237 ","created_at":"2018-07-02T19:25:07Z","updated_at":"2018-07-03T19:57:04Z","closed_at":null,"merged_at":null,"merge_commit_sha":"4f6236e65aff41b21822bf7d20433ab9ceaa8208","assignee":null,"assignees":[],"requested_reviewers":[{"login":"jgrandja","id":10884212,"node_id":"MDQ6VXNlcjEwODg0MjEy","avatar_url":"https://avatars1.githubusercontent.com/u/10884212?v=4","gravatar_id":"","url":"https://api.github.com/users/jgrandja","html_url":"https://github.com/jgrandja","followers_url":"https://api.github.com/users/jgrandja/followers","following_url":"https://api.github.com/users/jgrandja/following{/other_user}","gists_url":"https://api.github.com/users/jgrandja/gists{/gist_id}","starred_url":"https://api.github.com/users/jgrandja/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jgrandja/subscriptions","organizations_url":"https://api.github.com/users/jgrandja/orgs","repos_url":"https://api.github.com/users/jgrandja/repos","events_url":"https://api.github.com/users/jgrandja/events{/privacy}","received_events_url":"https://api.github.com/users/jgrandja/received_events","type":"User","site_admin":false}],"requested_teams":[],"labels":[],"milestone":null,"commits_url":"https://api.github.com/repos/spring-projects/spring-security/pulls/5476/commits","review_comments_url":"https://api.github.com/repos/spring-projects/spring-security/pulls/5476/comments","review_comment_url":"https://api.github.com/repos/spring-projects/spring-security/pulls/comments{/number}","comments_url":"https://api.github.com/repos/spring-projects/spring-security/issues/5476/comments","statuses_url":"https://api.github.com/repos/spring-projects/spring-security/statuses/48cb2e996c0a95755bfffa0018efd148cb09e160","head":{"label":"jzheaux:resource-server-jwks","ref":"resource-server-jwks","sha":"48cb2e996c0a95755bfffa0018efd148cb09e160","user":{"login":"jzheaux","id":3627351,"node_id":"MDQ6VXNlcjM2MjczNTE=","avatar_url":"https://avatars0.githubusercontent.com/u/3627351?v=4","gravatar_id":"","url":"https://api.github.com/users/jzheaux","html_url":"https://github.com/jzheaux","followers_url":"https://api.github.com/users/jzheaux/followers","following_url":"https://api.github.com/users/jzheaux/following{/other_user}","gists_url":"https://api.github.com/users/jzheaux/gists{/gist_id}","starred_url":"https://api.github.com/users/jzheaux/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jzheaux/subscriptions","organizations_url":"https://api.github.com/users/jzheaux/orgs","repos_url":"https://api.github.com/users/jzheaux/repos","events_url":"https://api.github.com/users/jzheaux/events{/privacy}","received_events_url":"https://api.github.com/users/jzheaux/received_events","type":"User","site_admin":false},"repo":{"id":117196711,"node_id":"MDEwOlJlcG9zaXRvcnkxMTcxOTY3MTE=","name":"spring-security","full_name":"jzheaux/spring-security","owner":{"login":"jzheaux","id":3627351,"node_id":"MDQ6VXNlcjM2MjczNTE=","avatar_url":"https://avatars0.githubusercontent.com/u/3627351?v=4","gravatar_id":"","url":"https://api.github.com/users/jzheaux","html_url":"https://github.com/jzheaux","followers_url":"https://api.github.com/users/jzheaux/followers","following_url":"https://api.github.com/users/jzheaux/following{/other_user}","gists_url":"https://api.github.com/users/jzheaux/gists{/gist_id}","starred_url":"https://api.github.com/users/jzheaux/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jzheaux/subscriptions","organizations_url":"https://api.github.com/users/jzheaux/orgs","repos_url":"https://api.github.com/users/jzheaux/repos","events_url":"https://api.github.com/users/jzheaux/events{/privacy}","received_events_url":"https://api.github.com/users/jzheaux/received_events","type":"User","site_admin":false},"private":false,"html_url":"https://github.com/jzheaux/spring-security","description":"Spring Security","fork":true,"url":"https://api.github.com/repos/jzheaux/spring-security","forks_url":"https://api.github.com/repos/jzheaux/spring-security/forks","keys_url":"https://api.github.com/repos/jzheaux/spring-security/keys{/key_id}","collaborators_url":"https://api.github.com/repos/jzheaux/spring-security/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/jzheaux/spring-security/teams","hooks_url":"https://api.github.com/repos/jzheaux/spring-security/hooks","issue_events_url":"https://api.github.com/repos/jzheaux/spring-security/issues/events{/number}","events_url":"https://api.github.com/repos/jzheaux/spring-security/events","assignees_url":"https://api.github.com/repos/jzheaux/spring-security/assignees{/user}","branches_url":"https://api.github.com/repos/jzheaux/spring-security/branches{/branch}","tags_url":"https://api.github.com/repos/jzheaux/spring-security/tags","blobs_url":"https://api.github.com/repos/jzheaux/spring-security/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/jzheaux/spring-security/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/jzheaux/spring-security/git/refs{/sha}","trees_url":"https://api.github.com/repos/jzheaux/spring-security/git/trees{/sha}","statuses_url":"https://api.github.com/repos/jzheaux/spring-security/statuses/{sha}","languages_url":"https://api.github.com/repos/jzheaux/spring-security/languages","stargazers_url":"https://api.github.com/repos/jzheaux/spring-security/stargazers","contributors_url":"https://api.github.com/repos/jzheaux/spring-security/contributors","subscribers_url":"https://api.github.com/repos/jzheaux/spring-security/subscribers","subscription_url":"https://api.github.com/repos/jzheaux/spring-security/subscription","commits_url":"https://api.github.com/repos/jzheaux/spring-security/commits{/sha}","git_commits_url":"https://api.github.com/repos/jzheaux/spring-security/git/commits{/sha}","comments_url":"https://api.github.com/repos/jzheaux/spring-security/comments{/number}","issue_comment_url":"https://api.github.com/repos/jzheaux/spring-security/issues/comments{/number}","contents_url":"https://api.github.com/repos/jzheaux/spring-security/contents/{+path}","compare_url":"https://api.github.com/repos/jzheaux/spring-security/compare/{base}...{head}","merges_url":"https://api.github.com/repos/jzheaux/spring-security/merges","archive_url":"https://api.github.com/repos/jzheaux/spring-security/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/jzheaux/spring-security/downloads","issues_url":"https://api.github.com/repos/jzheaux/spring-security/issues{/number}","pulls_url":"https://api.github.com/repos/jzheaux/spring-security/pulls{/number}","milestones_url":"https://api.github.com/repos/jzheaux/spring-security/milestones{/number}","notifications_url":"https://api.github.com/repos/jzheaux/spring-security/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/jzheaux/spring-security/labels{/name}","releases_url":"https://api.github.com/repos/jzheaux/spring-security/releases{/id}","deployments_url":"https://api.github.com/repos/jzheaux/spring-security/deployments","created_at":"2018-01-12T05:29:44Z","updated_at":"2018-06-20T21:44:50Z","pushed_at":"2018-07-03T18:35:16Z","git_url":"git://github.com/jzheaux/spring-security.git","ssh_url":"git@github.com:jzheaux/spring-security.git","clone_url":"https://github.com/jzheaux/spring-security.git","svn_url":"https://github.com/jzheaux/spring-security","homepage":"http://spring.io/spring-security","size":31007,"stargazers_count":0,"watchers_count":0,"language":"Java","has_issues":true,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":true,"forks_count":0,"mirror_url":null,"archived":false,"open_issues_count":8,"license":{"key":"apache-2.0","name":"Apache License 2.0","spdx_id":"Apache-2.0","url":"https://api.github.com/licenses/apache-2.0","node_id":"MDc6TGljZW5zZTI="},"forks":0,"open_issues":8,"watchers":0,"default_branch":"master"}},"base":{"label":"spring-projects:master","ref":"master","sha":"998d1a064babd04951ae591adc500a20d7c31e56","user":{"login":"spring-projects","id":317776,"node_id":"MDEyOk9yZ2FuaXphdGlvbjMxNzc3Ng==","avatar_url":"https://avatars0.githubusercontent.com/u/317776?v=4","gravatar_id":"","url":"https://api.github.com/users/spring-projects","html_url":"https://github.com/spring-projects","followers_url":"https://api.github.com/users/spring-projects/followers","following_url":"https://api.github.com/users/spring-projects/following{/other_user}","gists_url":"https://api.github.com/users/spring-projects/gists{/gist_id}","starred_url":"https://api.github.com/users/spring-projects/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/spring-projects/subscriptions","organizations_url":"https://api.github.com/users/spring-projects/orgs","repos_url":"https://api.github.com/users/spring-projects/repos","events_url":"https://api.github.com/users/spring-projects/events{/privacy}","received_events_url":"https://api.github.com/users/spring-projects/received_events","type":"Organization","site_admin":false},"repo":{"id":3148979,"node_id":"MDEwOlJlcG9zaXRvcnkzMTQ4OTc5","name":"spring-security","full_name":"spring-projects/spring-security","owner":{"login":"spring-projects","id":317776,"node_id":"MDEyOk9yZ2FuaXphdGlvbjMxNzc3Ng==","avatar_url":"https://avatars0.githubusercontent.com/u/317776?v=4","gravatar_id":"","url":"https://api.github.com/users/spring-projects","html_url":"https://github.com/spring-projects","followers_url":"https://api.github.com/users/spring-projects/followers","following_url":"https://api.github.com/users/spring-projects/following{/other_user}","gists_url":"https://api.github.com/users/spring-projects/gists{/gist_id}","starred_url":"https://api.github.com/users/spring-projects/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/spring-projects/subscriptions","organizations_url":"https://api.github.com/users/spring-projects/orgs","repos_url":"https://api.github.com/users/spring-projects/repos","events_url":"https://api.github.com/users/spring-projects/events{/privacy}","received_events_url":"https://api.github.com/users/spring-projects/received_events","type":"Organization","site_admin":false},"private":false,"html_url":"https://github.com/spring-projects/spring-security","description":"Spring Security","fork":false,"url":"https://api.github.com/repos/spring-projects/spring-security","forks_url":"https://api.github.com/repos/spring-projects/spring-security/forks","keys_url":"https://api.github.com/repos/spring-projects/spring-security/keys{/key_id}","collaborators_url":"https://api.github.com/repos/spring-projects/spring-security/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/spring-projects/spring-security/teams","hooks_url":"https://api.github.com/repos/spring-projects/spring-security/hooks","issue_events_url":"https://api.github.com/repos/spring-projects/spring-security/issues/events{/number}","events_url":"https://api.github.com/repos/spring-projects/spring-security/events","assignees_url":"https://api.github.com/repos/spring-projects/spring-security/assignees{/user}","branches_url":"https://api.github.com/repos/spring-projects/spring-security/branches{/branch}","tags_url":"https://api.github.com/repos/spring-projects/spring-security/tags","blobs_url":"https://api.github.com/repos/spring-projects/spring-security/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/spring-projects/spring-security/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/spring-projects/spring-security/git/refs{/sha}","trees_url":"https://api.github.com/repos/spring-projects/spring-security/git/trees{/sha}","statuses_url":"https://api.github.com/repos/spring-projects/spring-security/statuses/{sha}","languages_url":"https://api.github.com/repos/spring-projects/spring-security/languages","stargazers_url":"https://api.github.com/repos/spring-projects/spring-security/stargazers","contributors_url":"https://api.github.com/repos/spring-projects/spring-security/contributors","subscribers_url":"https://api.github.com/repos/spring-projects/spring-security/subscribers","subscription_url":"https://api.github.com/repos/spring-projects/spring-security/subscription","commits_url":"https://api.github.com/repos/spring-projects/spring-security/commits{/sha}","git_commits_url":"https://api.github.com/repos/spring-projects/spring-security/git/commits{/sha}","comments_url":"https://api.github.com/repos/spring-projects/spring-security/comments{/number}","issue_comment_url":"https://api.github.com/repos/spring-projects/spring-security/issues/comments{/number}","contents_url":"https://api.github.com/repos/spring-projects/spring-security/contents/{+path}","compare_url":"https://api.github.com/repos/spring-projects/spring-security/compare/{base}...{head}","merges_url":"https://api.github.com/repos/spring-projects/spring-security/merges","archive_url":"https://api.github.com/repos/spring-projects/spring-security/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/spring-projects/spring-security/downloads","issues_url":"https://api.github.com/repos/spring-projects/spring-security/issues{/number}","pulls_url":"https://api.github.com/repos/spring-projects/spring-security/pulls{/number}","milestones_url":"https://api.github.com/repos/spring-projects/spring-security/milestones{/number}","notifications_url":"https://api.github.com/repos/spring-projects/spring-security/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/spring-projects/spring-security/labels{/name}","releases_url":"https://api.github.com/repos/spring-projects/spring-security/releases{/id}","deployments_url":"https://api.github.com/repos/spring-projects/spring-security/deployments","created_at":"2012-01-10T21:50:57Z","updated_at":"2018-07-03T17:04:34Z","pushed_at":"2018-07-03T18:35:23Z","git_url":"git://github.com/spring-projects/spring-security.git","ssh_url":"git@github.com:spring-projects/spring-security.git","clone_url":"https://github.com/spring-projects/spring-security.git","svn_url":"https://github.com/spring-projects/spring-security","homepage":"http://spring.io/spring-security","size":30971,"stargazers_count":2586,"watchers_count":2586,"language":"Java","has_issues":true,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":true,"forks_count":2544,"mirror_url":null,"archived":false,"open_issues_count":844,"license":{"key":"apache-2.0","name":"Apache License 2.0","spdx_id":"Apache-2.0","url":"https://api.github.com/licenses/apache-2.0","node_id":"MDc6TGljZW5zZTI="},"forks":2544,"open_issues":844,"watchers":2586,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/spring-projects/spring-security/pulls/5476"},"html":{"href":"https://github.com/spring-projects/spring-security/pull/5476"},"issue":{"href":"https://api.github.com/repos/spring-projects/spring-security/issues/5476"},"comments":{"href":"https://api.github.com/repos/spring-projects/spring-security/issues/5476/comments"},"review_comments":{"href":"https://api.github.com/repos/spring-projects/spring-security/pulls/5476/comments"},"review_comment":{"href":"https://api.github.com/repos/spring-projects/spring-security/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/spring-projects/spring-security/pulls/5476/commits"},"statuses":{"href":"https://api.github.com/repos/spring-projects/spring-security/statuses/48cb2e996c0a95755bfffa0018efd148cb09e160"}},"author_association":"CONTRIBUTOR"}}
{"actor":{"display_login":"rwinch"}}