Spring Tips: The Spring Authorization Server

No video

Spring Tips: The Spring Authorization Server

Рет қаралды 16,952

Күн бұрын

Hi, Spring fans! In this installment, Josh Long looks at the fantastic Spring Authorization Server, the easy button for integrating and deploying OAuth and OIDC support for your Spring Boot applications! In this video we'll take our first steps setting up an OAuth authorization server, and securing an HTTP API with it.

Пікірлер: 30

@lhxperimental 6 ай бұрын

It would have been less confusing if the names used were non-generic. "client", "spring" as values create confusion - one doesn't know at first glance if it is a user defined value, or something that you have to use as is. "client" and "spring" also happen to occur in property keys - not just here but in the larger spring/java ecosystem which adds to the confusion. Had to watch it back and forth several times to make sense.

@corssobv 6 ай бұрын

i agree!

@kevinnguyen163 6 ай бұрын

good point

@pjl-software 6 ай бұрын

Very relevant, thank you!! Just finished my own KZfaq series building a web app using Google Sign-on JWTs as my authorization server with Spring Boot/Spring Security as my resource server. I'd like to extend the series to include a custom Spring Authorization server :)

@paulfx5019 7 күн бұрын

Hey Josh, you are the man as usual....although I do have 1 question, how does the user logout? Cheers

@yasbas3883 Күн бұрын

maybe by just calling the "/logout" in the app where you have your oauth2 client?

@michaelmikeyjacobs 6 ай бұрын

Hi Josh, awesome video as always. Would it be possible to extend this example to multiple different identity providers in the authorization server and how would this be done, since the idp will generate the token but the client will validate against the Authorization Server?

@gondaimgano 6 ай бұрын

followed this to the letter but for some reason I am getting a whitelabel "/error" is there something I am missing? its saying too many redirects 🤔

@hablahei1 6 ай бұрын

I would love some kind of tutorial on how to set up a client credentials grant / flow authorization server

@emileastih9006 6 ай бұрын

Great video thank you!

@thetrilbies1 4 ай бұрын

Great video Josh. My use case is internel app eg APIs -> gateway -> resource server. Can I use the oauth2 server in this scenario?

@mohammadtoficmohammad3594 5 ай бұрын

thank you very useful

@abhisheksoni3800 Ай бұрын

In the client application, It is giving me error "Unknown provider ID 'spring'"

@toritsejuFO 3 ай бұрын

"on my second favorite place on the Internet", 😂😂😂 always

@malikoski 6 ай бұрын

Josh, where can I buy this t-shirt? Great video!!

@AjayKumar-fd9mv 6 ай бұрын

This is great

@goalreacher6288 4 ай бұрын

Doest Spring Authorization server support SAML protocol?

@amitpccsful 5 ай бұрын

where in code authorization code is exchanged with access token?

@yognirog 6 ай бұрын

much helpful thank you :) 77th like

@rajeevjayaram4981 5 ай бұрын

Would it be possible or you to implement PKCE

@miquel975 4 ай бұрын

Hi again, one question, if somebody can help me... I have a front end with a HTML login, is possible use this HTML login to validate into authorization server, instead of default login page of authoritzation server? I don't customize the login page, I want use login HTML of my frontend. regards

@MrPakurfulo 3 ай бұрын

I imagine you can do it with a redirect in the oauth2 configuration

@sumitpaswan2682 6 ай бұрын

consent page is not coming. in my case after login directly it is show response with {"message" : "Hello, one"}

@thetrilbies1 4 ай бұрын

The consent page is not showing because in the application.yml in the registration spring section, we didnt specify requires consent.

@sumitpaswan2682 4 ай бұрын

6:21 you mean spring.security.oauth2.authorizationserver.client.client1.requires-authorization-consent=true I have already configured above property

@yuyeyang4973 4 ай бұрын

hello, when i get localhost:8080/ authserver print out org.springframework.security.access.AccessDeniedException: Access Denied, why ？

@arnabchowdhury4892 6 ай бұрын

Please share your code

@konstiblum 6 ай бұрын

Please lose the "30 seconds later" animations. They are only annoying, adding nothing to the video.

6 ай бұрын

please, is Josh Long, do you know how many people this man has helped? You don't know what you are saying, for me he can put that intro longer if he wants, it is nothing compared to all his contribution, and he is always contributing.