Secure REST API with authentication using Spring Boot , Security , OAuth2 and JPA.

In this video you can see how to secure rest APIs using the technologies aforementioned.

You can find more about this topic on official spring documentation:

00:00 : Introduction
04:30 : Setting up Authorization Server
11:13 : Setting up the Resource Server
13:45 : Setting up the Authentication Manager
15:50 : Setting up a custom UserDetailsService
20:35 : Testing it out with Postman

[IraqAllFor]

Rocket man YOU ROCK, I am in a desperate situation where I need to learn Spring in general and Spring security in particular, now you are demonstrating how to implement the documentation in code, long way for me but at least getting grips with spring classes long names. Thanks

[iam_joshua_bcxvii]

This is about the easiest to understand tutorial I've found like ever yet for OAuth. With less the clutter of other configuration classes and just basically the needed things for understanding OAuth. Just the best. Highly recommeng this video for understanding and making Spring Security work with OAuth 2. Thanks for sharing. :D

[ldskmain]

Dude I don't know if you are going to see this comment, but I just want to say thank you. You make me so happy right now, thank you for the video. You are amazing!

[trozzonick]

Veramente bravo e sopratutto, inglese impeccabile. Well done mate. Thanks for sharing.

[ganeshkumarpalanisamy]

Thanks for sharing. You actually showed me about both how to read the documentation and implement using the same.

[TuanJinnNguyen]

Excellent stuffs. Work like a charm. And I love how details your clip is. We need more people like you mate

[kamer_ee]

For those who uses Spring 2.0.x and gets an error that says "authentication manager is cannot be autowired" or sth. similiar:
Add this class to your config package:

@Configuration
@EnableWebSecurity
public class WebSecurityConfig extends WebSecurityConfigurerAdapter {

@Bean
@Override
public AuthenticationManager authenticationManagerBean() throws Exception {
return
}

}

[krissh]

finally got the tutorial who covers all i wanted... cheers keep it up.

[hachaz]

You don't know how you helped me, excellent video!!. A Mexican developer

[joseleonardodosramos]

AWESOME, i was looking for a tutorial like this since a while, i will implement this and if i have doubts i will ask you some help. Thank you very much!!

[memento]

Great tutorial and pretty rare considering the subject ! It made me subscribe. Can't wait to see another video on OAuth and JPA !
Grazie

[thanh-binhnguyen]

thanks man, this helps me a lot! I want to ask a silly question: is "my-trusted-client" a name you just made up or is it a compulsory phrase?

[MyWayNMyLife]

Yup...This is awesome..Could you please also tell how the token get validating? and who's validating?

[AlexGLuque]

Thank you so much for creating this tutorial. I was looking exactly for something like this.

[hanumantd]

At t3.27, how did the userid/pwd dialog box pop up? The code that you have showed before this does not indicate any basic security configuration. So how did the app ask for userid and pwd?

[AlessandroMenezes]

Thanks! You have no idea how much you helped me.

[frnkquito]

Excelent tutorial. So detailed and explicative., but simple and easy to follow.

[hefire]

thanks a lot finally a clear and direct tutorial!

[normancashnic]

Great!!!!. How to do to implementing using OAuth 2.2.7 where the class is not.

[abdoulayediop]

good job RocketMan, how i can customize the url of authentication