Authentication and Authorization using JWT Token and Roles-Based Access Control | Quarkus Tutorial

✅ Authentication and Authorization using JWT Token and Roles-Based Access Control | Quarkus Tutoria | Quarkus Tutorial | QUARKUS | CloudNative | Java

⌚ Timestamps
00:00 Introduction | Quarkus Tutorial

I am Giuseppe Scaramuzzino and you can find me on Twitter @GiuseScara to provide feedback or discuss anything about this video 🙂

GitHub Repository:

What is Quarkus?
Quarkus is a Cloud Native, (Linux) Container First framework for writing Java applications. Quarkus is a MicroProfile implementation that focuses on efficiently running Java applications in containers in general and Kubernetes in particular. The MicroProfile project is aimed at
optimizing Enterprise Java for the microservices architecture.

What is JWT?
JSON Web Token is a proposed Internet standard for creating data with optional signature and/or optional encryption whose payload holds JSON that asserts some number of claims. The tokens are signed either using a private secret or a public/private key.

What is RBAC?
Role-Based Access Control (RBAC) attributes permissions to a user based on their business responsibilities. As the most common access control system, it determines access based on your role in the company—ensuring lower-level employees aren’t gaining access to high-level information.

📃 Leave me a comment
------------------------------------------------------------------------------------------------
Follow me here for more content:
🎬 Watch related playlists and videos

Quarkus | JWT Token | RBAC | Roles-Based Access Control | Java | Cloud-Native | Authorization | Authentication

#Quarkus #CloudNative #Java

[zvonimirkorman]

Thank you go your guide!
Just a friendly advice: At 18:23 you made a cut in the video in which you changed the jwt issuer value from amazon-cart to amazon-jwt and you didn't say anything about it. I spent hours trying to fix it because the program was not working and I got unauthorized post request until I manually went through each line of existing code and comparing it to mine. this field is new to me and I make mistakes easily. For experienced people I know this is not a problem but for new people it would really help a lot if you said it in the video. I hope you understand my point of view.
Everything else is spot on!

[abrahammoyo]

This guy makes hard things I like the stepwise building of application.

[sametnurel]

I came here just learn something about jwt with quarkus but this video contains lots of good practices. Thank you very much

[misigarodev]

Such a masterpiece. It's good to tell everyone that we don't need keycloak to secure our endpoint. Especially when we want to go live asap without burning a lot of money. Thank you

[joseaugustodossantossilva]

love you channel, thanks for exposing so many rich content like this

[walala]

Video utilissimo, grandissimo Giuseppe.

[nicolasfelipe]

thanks for this awesome tutorial, made it from start to finish.

[AnakheAjayi]

Brilliant!!! you just gave me a head-start on my new Job

[usmansheikh]

Very helpful 👌👌✔✔
Thanks for the video 👍👍
Waiting for your next video about "Bcrypt in quarkus"
Great content👌👌

[monjurmorshed]

Nicely and clearly explained, thanks for such clear ideas and demos.

[developersmill]

Hi, great tutorial, thank you! I am actually working on some other case. I am trying authorize some resource using Quarkus. I am passing the access token in headers, but when I am using quarkus-smallrye-jwt library it actually checks/validates the OpenId token/JWT token. The access token that I have is not a JWT token. How to force Quarkus when using @Authenticated annotation to use/validate access tokens. Maybe different lib is needed for that. SO to summ up how to validate access token on backend using quarkus with adnotation @Authenticated ?

[Liwgfr]

Grand merci for the video. Seems interesting to investigate Keycloak integration with external services such as Google, Facebook & etc sign in :)

[alaashireef]

How can I delete a token after logout?

[stylishskater]

I get an exception that my ssh key is only 2047 bits instead of 2048 and therefore is not accepted the JWT generation. Like wtf?

[dennis.geurts]

please note that System.currentTimeMillis() + 3600 most probably is not the expireAt that you actually wanted to set, should be more st like + 3600