When I use the demo-authorizationserver, messages-resource, and demo-client in the spring authorization server samples, I want to use ajax to get userlist in the demo-client. The demo-client reports an error。
Access to XMLHttpRequest at ‘http://localhost:9000/oauth2/authorize?response_type=code&client_id=messaging-client&scope=message.read%20message.write&state=8U7X77oupXyeCXBv-0jKyATz_H3UJxdjCxHGIjv8A80%3D&redirect_uri=http://127.0.0.1:8080/authorized’ (redirected from ‘http://127.0.0.1:8080/user/list’) from origin ‘http://127.0.0.1:8080’ has been blocked by CORS policy: Response to preflight request doesn’t pass access control check: Redirect is not allowed for a preflight request.

When I use the demo-authorizationserver, messages-resource, and demo-client in the spring authorization server samples, I want to use ajax to get userlist in the demo-client. The demo-client reports an error。
Access to XMLHttpRequest at ‘http://localhost:9000/oauth2/authorize?response_type=code&client_id=messaging-client&scope=message.read%20message.write&state=8U7X77oupXyeCXBv-0jKyATz_H3UJxdjCxHGIjv8A80%3D&redirect_uri=http://127.0.0.1:8080/authorized’ (redirected from ‘http://127.0.0.1:8080/user/list’) from origin ‘http://127.0.0.1:8080’ has been blocked by CORS policy: Response to preflight request doesn’t pass access control check: Redirect is not allowed for a preflight request.

When I use the demo-authorizationserver, messages-resource, and demo-client in the spring authorization server samples, I want to use ajax to get userlist in the demo-client. The demo-client reports an error。
Access to XMLHttpRequest at ‘http://localhost:9000/oauth2/authorize?response_type=code&client_id=messaging-client&scope=message.read%20message.write&state=8U7X77oupXyeCXBv-0jKyATz_H3UJxdjCxHGIjv8A80%3D&redirect_uri=http://127.0.0.1:8080/authorized’ (redirected from ‘http://127.0.0.1:8080/user/list’) from origin ‘http://127.0.0.1:8080’ has been blocked by CORS policy: Response to preflight request doesn’t pass access control check: Redirect is not allowed for a preflight request.

I want to use Spring Authorization Server with Federated Identity Providers.
I don’t need Internal database in this case. Is it possible to disable it or skip configuration for database?

I have this configuration for JdbcTemplate used with Spring Authorization Server:

We recently upgraded to Spring Boot 3.3 and Spring Authorization Server 1.3.0. We do an OAuth2 flow with the following configuration:

I am implementing PKCE where I am redirecting to SAS (Spring Authorization Server) with my code challenge. I am storing my code_verifier in encrypted form in the cookie during the redirect. I can see the cookie in the Chrome browser in the Cookies tab.

I have 2 questions on the Spring Authorization Server OAuth2 client creation which are probably silly sounding ones.