OAuth2 & Spring boot 3 & Social login | never been easier

OAuth 2.0, which stands for “Open Authorization”, is a standard designed to allow a website or application to access resources hosted by other web apps on behalf of a user. It replaced OAuth 1.0 in 2012 and is now the de facto industry standard for online authorization. OAuth 2.0 provides consented access and restricts actions of what the client app can perform on resources on behalf of the user, without ever sharing the user's credentials.

Although the web is the main platform for OAuth 2, the specification also describes how to handle this kind of delegated access to other client types (browser-based applications, server-side web applications, native/mobile apps, connected devices, etc.)

OAuth 2.0 is an authorization protocol and NOT an authentication protocol. As such, it is designed primarily as a means of granting access to a set of resources, for example, remote APIs or user data.

Don't Forget to
===========================================
💯 Subscribe to the youtube channel

Table of content
00:00 Intro
02:57 What is OAuth 2.0
04:35 Principles of OAuth 2.0
06:13 The big picture of the OAuth 2.0 flow
09:41 OAuth 2.0 detailed flow
15:22 Oauth 2.0 terms
18:00 Quick word before coding
19:40 Create a new Spring boot project
22:12 Create the GitHub application
26:52 Create the Google application
30:00 Create a demo controller
34:00 Secure the backend endpoints
37:18 Add the OAuth 2.0 GitHub configuration
40:08 Test the Authorization Flow
45:17 debug the Authorization flow
51:18 How Spring really implements OAuth 2.0
01:01:22 Add Google as OAuth 2.0 provider
01:03:23 Connect with Google
01:04:47 What comes next?

[BoualiAli]

Join the Micro Services course waiting list and get and get an exclusive *EARLY-BIRD discount*

[AnilKumarPrajapati-lvfs]

Wow, what an incredibly helpful video on Spring Boot! 🌱👍 I really appreciate the clear explanations and step-by-step instructions provided.

[kevinameda]

Thank you Ali I really appreciate you very much, stay blessed and God help you in all your endeavors. To find ones withh such a heart is rare

[jayjoshi]

Awesome video on OAuth 2.0 implementation using social logins. I never thought that this would be so much easier, but I think you made it easy to understand for beginners to experienced and seniors as well. Your contribution is very much valuable and I hope you get more and more support in terms of Subscription + likes + shares + comments.

[dzrtap]

Such a great video. Thank you! A lot of people would like to see how to implement oauth2 with a logic jwt, once you singed in with a google, front get the jwt token and invoke any methods with the jwt token. That is means logic with the jwt token will be not changed, but we added google oauth2. None of youtube videos about this issue…

[NikhilkumarRanbhare]

Thank you so much
your video helped me alot.

[zabialy]

Great Video. It would be cool to see how the workflow looks when it is combined with a usual JWT Token authenticated with credentials.

[mrpipiskin]

Thank you. Very userful for beginners.

[merxxibeaucoup]

I hit like before I even watched it it was gonna be great, and it was !!

[vageeshanvageesh]

Great content, can you please guide us on using JWT oauth2 in the combination of Authorisation server and resource server

[boubacarbarry]

Thank you so much, i've learned a lot from you, may the Almighty reward you !
The next thing i would like to learn from you is microservice and ci/cd approach.

[seethad]

you are really awesome..Thank you for this valuable session..

[bryanoconalhere]

Dear, I have gone through so many videos from paid courses as well but really didn't see any such tutorial. You really explained and demonstrated so easily. Salute to you. Keep it up.
Thank you so much for such informative video.

[ЕвгенийВасильев-щв]

When I creating app in google cloud, it asking redirect-uri. It should end with login/oauth2/code/google and for github it should end with login/oauth2/code/github

[aa-ipvo]

how can i add this to my current custom register login with jwt ! and what do i save in the db if i dont have pw for the user

[Igris]

Great video, thank you so much. How about Android applications? Where should I make configuration of Oauth2 in this case? In android application or as you have shown in Rest API ?

[chandantalreja]

Excellent explanation 🙌🏻 Keep videos like this coming 🙌🏻

[johnmumo]

Thanks buddy and i like how your doing real solutions example which someone can apply to their personal project Next maybe we should host this app now

[danteextreme]

Nice video. But what if I have a custom token using Auth0, and I want to limit or bind oauth2 login page response to only a specific endpoint?

I tried something like that using Spring Security 6.3.0, and I couldn't figure it out yet.

/login to my custom JWT and /OAuth2 to be the receptor of the Google login page.

When I used oauth2Login, the login page responds even in non-existent endpoints

[ichebaduchukwu]

this video is so simply for every one to understand..can you make more videos on this?