Observed Signal · Jul 15, 2026 · Technical Writeup · Source: DEV Community · Impact: 2/5 · Sentiment: Neutral
Spring Boot IAM: OAuth2 Redirect Bug in Production
The author built identityCore, a self-hosted Identity & Access Management (IAM) service in Spring Boot, implementing form login plus Google (OIDC) and GitHub (OAuth2) logins, RBAC stored as JPA entities, and a unified provisioning flow. The post explains key differences between OAuth2 and OIDC (GitHub returns an opaque access_token requiring extra API calls; Google returns an id_token JWT), and describes a production-only bug where OAuth2 logins failed with redirect_uri_mismatch because TLS was terminated upstream and the app ignored X-Forwarded headers. The one-line fix was to set server.forward-headers-strategy=framework so Spring trusts proxy headers. The author lists operational lessons about protocol differences, deployment vs demo differences, and centralized user provisioning.
Practical engineering details on deploying self-hosted IAM, OAuth2 vs OIDC behavior, and proxy header handling are useful to teams operating identity infrastructure; relevant to integrations in marketing and adtech systems but not industry-shifting.
Track Okta Signals & Market Shifts in Real-Time
Polaris7 autonomous intelligence agents track regulatory filings, primary sources, executive changes, and deal flow 24/7. Create your free Explorer workspace to monitor these entities.
Key Takeaways & Evidence Grounding
- identityCore is a self-hosted IAM service built with Spring Boot (stack: Spring Boot 3.3.5, Spring Security 6.3.4, Spring Data JPA, PostgreSQL/H2, Thymeleaf, HikariCP, BCrypt).
- The system supports three login paths (form login, Google via OIDC, GitHub via OAuth2) that resolve to a single UserEntity and use JPA RoleEntity / PermissionEntity for RBAC.
- GitHub returns an opaque access_token requiring downstream calls (e.g., GET /user and /user/emails) to obtain a verified email; Google returns an id_token (JWT) containing email and email_verified claims.
- A production-only OAuth2 failure (redirect_uri_mismatch) was caused by TLS termination at the edge and the app not honoring X-Forwarded headers; the fix was server.forward-headers-strategy=framework.
- Repository branch for the OAuth2 work is referenced as github.com/Tharvesh2026/identityCore_J25.
Connected Companies & Entities
5 Entities mapped“identityCore is a self-hosted Identity & Access Management (IAM) service — the kind of thing you'd normally reach for Auth0, Keycloak, or Co...”
“Three login paths, one identity model: form login, Google (OIDC), GitHub (OAuth2) — all resolving to the same UserEntity...”
“identityCore is a self-hosted Identity & Access Management (IAM) service — the kind of thing you'd normally reach for Auth0, Keycloak, or Co...”
“identityCore is a self-hosted Identity & Access Management (IAM) service — the kind of thing you'd normally reach for Auth0, Keycloak, or Co...”
“Three login paths, one identity model: form login, Google (OIDC), GitHub (OAuth2) — all resolving to the same UserEntity...”
Ontology Mapping & Concepts
Related Market Signals & Shifts
Recent verified developments and strategic activity across this market segment.
agenticadvertising.org adopts agentic standard brand.json
agenticadvertising.org has published a live brand.json manifest, establishing machine-readable autonomous agent delegation capabilities under protocol specifications.
Checkout.com annualised net revenue hits $750M
Payments provider Checkout.com announced that its annualised net revenue jumped 28% year-on-year to $750 million, attributing growth to increased payment volume and geographical expansion. The company, valued at $12 billion, expects to achieve $150 million in adjusted EBITDA profit for 2026, having turned profitable in 2024. Checkout.com operates across 56 countries with 10 acquiring licences and projected payment volume of $480 billion for full-year 2026. The company also plans to expand its money management offering and accelerate its AI strategy in agentic commerce and payments. Additionally, it disclosed an internal $40 million dividend from subsidiary Checkout Limited to the parent, which it clarifies is a treasury transaction, not shareholder distribution. Chief Revenue Officer Antoine Nougué emphasized that sustained profitability enables investment in AI to help merchants generate revenue. The company employs 1,700 people.
Anthropic IPO Prospectus Reveals Losses, Growth, AI Risks
Anthropic's IPO prospectus, reviewed by the Financial Times and Reuters, reveals significant financial and risk details. In 2025, the company reported revenue of $4.6 billion (up from $386 million in 2024), with operating losses exceeding $8 billion. Net loss reached about $42 billion, largely due to a $34 billion accounting effect from convertible financing markups. Nearly a quarter of revenue came from just two clients. The prospectus devotes a third of its content to risk factors, including warnings that AI models could resist shutdown, conceal information, blackmail-like behavior, or pose 'existential risks to humanity.' Co-founders retain control via a 'Founder LLC' holding 50.1% of voting rights. The IPO, planned for Nasdaq after the U.S. midterm elections, could value the company at over $2 trillion.
Track Real-Time Market Signals & Shifts
Set up custom watchlists to receive automated, evidence-grounded executive digests whenever material signals or shifts occur across your tracked landscape.