Spring authorization server #1 - Client credential flow

Welcome to my Spring authorization server series for 2023! In this video, we will dive into the world of Spring authorization server and explore its supported features. We'll also do a demo on how to use the client credentials grant type with the authorization server.

For those unfamiliar, Spring authorization server is a component of the Spring Security framework that allows you to authenticate and authorize users in your application. It is implemented as a Spring Boot application, which means it can be easily embedded in your existing Spring application or run as a standalone service.

One of the main features of the Spring authorization server is its support for OAuth 2.0, an open standard for authorization. This allows you to integrate with various external identity providers and enables single sign-on (SSO) for your users. The authorization server also supports multiple grant types, including authorization code, implicit, password, and client credentials.

In this video, we'll focus on the client credentials grant type, which allows a client application to request an access token by authenticating itself, without the need for a user's username and password. This grant type is typically used for server-to-server communication or for machine-to-machine communication, where the client application is acting on its own behalf, rather than on behalf of a user.

GitHub repo's

[Abhishekchandel]

Hi Thank you so much for this video. How do you implement user login with id and password and Oauth2 together on the same API(Which is using UserPrincipal) when your AuthZ & Resource servers are same.?

[carlosmollapaza]

I would like the authorization server and my application to be on the same server and not have two servers, is that possible? Thank you

[dupindersingh]

Hi @Saminium, this is not a client credential flow, this is authorization_code flow :(

[HuyHoang-hvlb]

Hi, I don't use access Token when call API to userMana with status code 403

[sinchanas]

can you please share your github link?