JWT Authentication & Authorization with Spring Security | Step-by-step tutorial

This is a comprehensive tutorial on JSON Web Tokens (JWT) to master its implementation and use in securing web applications. This video covers the basics of JWT, including its structure, how to generate and use it for authorization, and a comparison of different signing algorithms. This step-by-step tutorial is perfect for beginners and for those looking to enhance their Spring boot security skills.

📚 Chapters:
(00:00:00) Introduction
(00:01:13) 1. Introduction to JSON Web Token
(00:03:34) 1.1. Anatomy of a JWT
(00:07:46) 2. Sample tutorial project familiarization
(00:11:58) 3. Generate a new JWT
(00:14:41) 3.1. Create an HMAC secret key
(00:18:14) Create JWT for a user with the secret key
(00:24:42) 3.2. Authenticate and return JWT
(00:36:59) 4. Authorization with JWT
(00:42:33) 4.1. Extract username from JWT
(00:45:49) 4.2. Validate JWT
(00:56:29) 5. Comparison of signing algorithms

[shubhammguptaa]

This is the best tutorial on spring security (including the previous video). Explain of everything why a particular line is written. Brilliant!! Thank you so much Sir 🙏

[saigovardhanveggalam]

Thank you very much been looking for this !

[kjsaeko]

Thank you for the video, great explanation. Keep it up !

[tyilwyj]

Thank you for all you've done. That is helpful.

[scottanderson]

You're incredibly smart and helpful. Thank you so much!

[SaqibWani-pi]

Thank you for your precious time and effort.

[MichaelsSoftwareTestingA-wuxp]

Thank you for this tutorial. I like that you are not just showing the code, but also explain it.

[sinhvienit-of]

Thank you for this tutorial, video is so very good

[mohamadmj]

Well explained, it's complete and clear demonstration of how to use spring security

[cozitsyash]

Thank you Sir ... Please bring more Spring boot tutorials and its important and advanced concepts
Great Learning

[seman]

بارك الله فيك ارجوا ان تستمر في هذا الابداع وعمل سلسله للتعليم اخى العزيز May God bless you. I hope you continue this creativity and create a series for education, my dear brother

[ganeshenamala]

Waiting for this video, thank you bro 🙏

[VickyKumar-xomp]

Sir thank u for this video.
Can you take one class of spring project how to debugging our and execution flow of project.

[Premkumar-esbx]

Hi bro, the way you are explaining and writing code is really awesome, keep rocking
Can you plz post video for interceptor concept in java spring boot

[thushanchathuranga]

Thank you for this wonderful tutorial. I really enjoyed the way you explained the code. Can you add and extend this Spring security series with refreshing tokens, OAuth and practical advantages & disadvantages of using JWT.
Can you make a tutorial for OpenID and Keycloak.

[pankajthakur]

Great well explained . well how we connect the api's with HTML pages ?

[jrdillip]

Sir one question here, so every time we actually pass the token as part of the request header. And it goes inside doFilterChain() method but why it is hitting the database every time to get the user details. It hits the loadUserByUsername() and the request goes to the database. Is it the expected scenario that every time it is hitting the database with every request. Please help me I have been struggling to understand this for a long time.

[thisgnop]

You're a lifesaver, brother. Find your taste and drink a cup. It's on me :)

[RN-jozt]

i think it's Symmetric Cryptography
my knowledge:
A single secret key is used for both creating and validating the token. Both the issuer and the verifier need to have access to this key.
my question
how verifier will get this secret key?
like i will send him personally or it will store in cloud .so he/she can access it, or i will send in mail, teams....

[zoomer]

sir I need a little help regarding your Library management project. Im trying to get done with a small presentation and Ive seen your project. When I use it, it shows a 'help' box linkin to your youtube channel. I want it to hide for the time being. Can you help me with it, with your github. You can direct me what can I do to remove it from your repo that I would download.