Spring Security and OpenID Connect 1. Overview In this quick tutorial, we’ll focus on setting up OpenID Connect with a Spring Security OAuth2 implementation. OpenID Connect is a simple identity layer built on top of the OAuth 2.0 protocol. And, more specifically, we’ll learn how to authenticate users using the… Continue Reading spring-security-openid-connect

Angular 4 Upgrade for Spring Security OAuth Spring Security OAuth 1. Overview In this quick tutorial, we’re going to upgrade our existing Angular application described here, to use Angular 4 instead of AngularJS. 2. Setup Angular4 First, we’ll use Angular CLI to generate and manage our front-end modules. First, we’ll… Continue Reading angular-4-upgrade-for-spring-security-oauth

Spring Security OAuth Login with WebFlux 1. Overview Spring Security added OAuth support for WebFlux starting with the 5.1.x GA. We’ll discuss how to configure our WebFlux application to use OAuth2 Login support. We’ll also discuss how to use WebClient to access OAuth2 secured resources. The OAuth Login configuration for… Continue Reading spring-oauth-login-webflux

Logout in an OAuth Secured Application 1. Overview In this quick tutorial, we’re going to show how we can add logout functionality to an OAuth Spring Security application. We’ll, of course, use the OAuth application described in a previous article – Creating a REST API with OAuth2. 2. Remove the… Continue Reading logout-spring-security-oauth

Spring Security 5 – OAuth2 Login 1. Overview Spring Security 5 introduces a new OAuth2LoginConfigurer class that we can use for configuring an external Authorization Server. In this article, we’ll explore some of the various configuration options available for the oauth2Login() element. 2. Maven Dependencies In addition to the standard… Continue Reading spring-security-5-oauth2-login

Customizing Authorization and Token Requests with Spring Security 5.1 Client 1. Overview Sometimes OAuth2 APIs can diverge a little from the standard, in which case we need to do some customizations to the standard OAuth2 requests. Spring Security 5.1 provides support for customizing OAuth2 authorization and token requests. In this… Continue Reading spring-security-custom-oauth-requests