Spring Oauth not authenticating

[Al Hobbs]

Hi all,

I got basic authentication to work with  userdetails, and userdetailsservice,
but my ultimate goal was to set up oauth2.
When I try to access my rest api with post man I get this response.
Request Headers: content-type:"application/x-www-form-urlencoded" authorization:"Basic bXktY2xpZW50LXdpdGgtc2VjcmV0OnNlY3JldA==" user-agent:"PostmanRuntime/7.1.1" accept:"*/*" host:"localhost:8080" Response Headers: x-frame-options:"DENY" www-authenticate:"Bearer realm="oauth2-resource", error="unauthorized", error_description="Full authentication is required to access this resource"" content-type:"application/json;charset=UTF-8" transfer-encoding:"chunked" date:"Tue, 13 Mar 2018 11:22:51 GMT"]

My server debug:

2018-03-13 20:22:51.516 DEBUG 10916 --- [nio-8080-exec-3] o.s.b.w.s.f.OrderedRequestContextFilter  : Bound request context to thread: org.apache.catalina.connector.RequestFacade@441ecbc7
2018-03-13 20:22:51.516 DEBUG 10916 --- [nio-8080-exec-3] o.s.s.web.util.matcher.OrRequestMatcher  : Trying to match using Ant [pattern='/oauth/token']
2018-03-13 20:22:51.516 DEBUG 10916 --- [nio-8080-exec-3] o.s.s.w.u.matcher.AntPathRequestMatcher  : Checking match of request : '/oauth/token'; against '/oauth/token'
2018-03-13 20:22:51.516 DEBUG 10916 --- [nio-8080-exec-3] o.s.s.web.util.matcher.OrRequestMatcher  : matched
2018-03-13 20:22:51.516 DEBUG 10916 --- [nio-8080-exec-3] o.s.security.web.FilterChainProxy        : /oauth/token at position 1 of 11 in additional filter chain; firing Filter: 'WebAsyncManagerIntegrationFilter'
2018-03-13 20:22:51.516 DEBUG 10916 --- [nio-8080-exec-3] o.s.security.web.FilterChainProxy        : /oauth/token at position 2 of 11 in additional filter chain; firing Filter: 'SecurityContextPersistenceFilter'
2018-03-13 20:22:51.516 DEBUG 10916 --- [nio-8080-exec-3] o.s.security.web.FilterChainProxy        : /oauth/token at position 3 of 11 in additional filter chain; firing Filter: 'HeaderWriterFilter'
2018-03-13 20:22:51.516 DEBUG 10916 --- [nio-8080-exec-3] o.s.security.web.FilterChainProxy        : /oauth/token at position 4 of 11 in additional filter chain; firing Filter: 'LogoutFilter'
2018-03-13 20:22:51.516 DEBUG 10916 --- [nio-8080-exec-3] o.s.s.web.util.matcher.OrRequestMatcher  : Trying to match using Ant [pattern='/logout', GET]
2018-03-13 20:22:51.516 DEBUG 10916 --- [nio-8080-exec-3] o.s.s.w.u.matcher.AntPathRequestMatcher  : Request 'POST /oauth/token' doesn't match 'GET /logout
2018-03-13 20:22:51.516 DEBUG 10916 --- [nio-8080-exec-3] o.s.s.web.util.matcher.OrRequestMatcher  : Trying to match using Ant [pattern='/logout', POST]
2018-03-13 20:22:51.516 DEBUG 10916 --- [nio-8080-exec-3] o.s.s.w.u.matcher.AntPathRequestMatcher  : Checking match of request : '/oauth/token'; against '/logout'
2018-03-13 20:22:51.516 DEBUG 10916 --- [nio-8080-exec-3] o.s.s.web.util.matcher.OrRequestMatcher  : Trying to match using Ant [pattern='/logout', PUT]
2018-03-13 20:22:51.517 DEBUG 10916 --- [nio-8080-exec-3] o.s.s.w.u.matcher.AntPathRequestMatcher  : Request 'POST /oauth/token' doesn't match 'PUT /logout
2018-03-13 20:22:51.518 DEBUG 10916 --- [nio-8080-exec-3] o.s.s.web.util.matcher.OrRequestMatcher  : Trying to match using Ant [pattern='/logout', DELETE]
2018-03-13 20:22:51.518 DEBUG 10916 --- [nio-8080-exec-3] o.s.s.w.u.matcher.AntPathRequestMatcher  : Request 'POST /oauth/token' doesn't match 'DELETE /logout
2018-03-13 20:22:51.518 DEBUG 10916 --- [nio-8080-exec-3] o.s.s.web.util.matcher.OrRequestMatcher  : No matches found
2018-03-13 20:22:51.518 DEBUG 10916 --- [nio-8080-exec-3] o.s.security.web.FilterChainProxy        : /oauth/token at position 5 of 11 in additional filter chain; firing Filter: 'BasicAuthenticationFilter'
2018-03-13 20:22:51.518 DEBUG 10916 --- [nio-8080-exec-3] o.s.s.w.a.www.BasicAuthenticationFilter  : Basic Authentication Authorization header found for user 'my-client-with-secret'
2018-03-13 20:22:51.518 DEBUG 10916 --- [nio-8080-exec-3] o.s.s.authentication.ProviderManager     : Authentication attempt using org.springframework.security.authentication.dao.DaoAuthenticationProvider
2018-03-13 20:22:51.518 DEBUG 10916 --- [nio-8080-exec-3] o.s.b.f.s.DefaultListableBeanFactory     : Returning cached instance of singleton bean 'scopedTarget.clientDetailsService'
2018-03-13 20:22:51.518 DEBUG 10916 --- [nio-8080-exec-3] o.s.s.w.header.writers.HstsHeaderWriter  : Not injecting HSTS header since it did not match the requestMatcher org.springframework.security.web.header.writers.HstsHeaderWriter$SecureRequestMatcher@266b6e9c
2018-03-13 20:22:51.518 DEBUG 10916 --- [nio-8080-exec-3] s.s.w.c.SecurityContextPersistenceFilter : SecurityContextHolder now cleared, as request processing completed
2018-03-13 20:22:51.518 DEBUG 10916 --- [nio-8080-exec-3] o.s.b.w.s.f.OrderedRequestContextFilter  : Cleared thread-bound request context: org.apache.catalina.connector.RequestFacade@441ecbc7
2018-03-13 20:22:51.519 ERROR 10916 --- [nio-8080-exec-3] o.a.c.c.C.[.[.[.[dispatcherServlet]      : Servlet.service() for servlet [dispatcherServlet] in context with path [/texas] threw exception

java.lang.IllegalArgumentException: There is no PasswordEncoder mapped for the id "null"
	at org.springframework.security.crypto.password.DelegatingPasswordEncoder$UnmappedIdPasswordEncoder.matches(DelegatingPasswordEncoder.java:238) ~[spring-security-core-5.0.3.RELEASE.jar:5.0.3.RELEASE]
	at org.springframework.security.crypto.password.DelegatingPasswordEnco

It looks like it's trying to do basic authentication for the client id that I put in the request.
I know the PasswordEncoder problem has to do with a wrong password format
but while I was debugging it never used my userdetailsservice so it wasn't even looking at the database.

my configs:

@Configuration
@EnableWebSecurity
public class SecurityConfiguration extends WebSecurityConfigurerAdapter {
    
    @Bean
    @Override
    public AuthenticationManager authenticationManagerBean() throws Exception {
        return super.authenticationManagerBean();
    }
    
    @Override
    public void configure(HttpSecurity security) throws Exception {
        security.authorizeRequests().
                anyRequest().authenticated()
                .and().httpBasic();
    }

}

@Configuration
@EnableAuthorizationServer
public class Oauth2Configuration  extends AuthorizationServerConfigurerAdapter {
    
    @Inject AuthenticationManager authenticationManager;
    
    @Qualifier("myUserDetailService")
    @Inject
    UserDetailsService userDetailsService;
    
    @Bean
    public JwtAccessTokenConverter accessTokenConverter() {
        return new JwtAccessTokenConverter();
    }
    
    
    @Override
    public void configure(AuthorizationServerSecurityConfigurer oauthServer) {
        oauthServer.
                tokenKeyAccess("permitAll()")
                .checkTokenAccess(
                        "hasAuthority('ROLE_TRUSTED_CLIENT')");
    }
    
    @Override
    public void configure(AuthorizationServerEndpointsConfigurer endpoints) {
        endpoints.
                authenticationManager(authenticationManager).
                userDetailsService(userDetailsService).
                accessTokenConverter(accessTokenConverter());   
    }
    
    @Override
    public void configure(ClientDetailsServiceConfigurer clients) throws Exception {
        clients.inMemory().
                withClient("MobileApp").
                authorizedGrantTypes("password").
                authorities("ROLE_TRUSTED_CLIENT").
                secret("CocoPizzaFishLight").
                scopes("read","write").
                resourceIds("resource")
        .and()
                .withClient("my-client-with-secret")
                    .authorizedGrantTypes("client_credentials", "password")
                    .authorities("ROLE_CLIENT", "ROLE_TRUSTED_CLIENT")
                    .scopes("read", "write")
                    .secret("secret");                      
    }    
}

The client name is my-client-with-secret, so the matching secret is "secret."
I ran a spring demo app with a similar request and it worked fine with even less configuration.
What could be the problem?

Thanks!