OAuth 2.0 Implementation with Spring Security and Spring Boot | Full Example

If you are interested, subscribe to the plan that fits you from the above link.

The OAuth 2.0 authorization framework is a protocol that allows a user to grant a third-party website or application access to the user's protected resources, without necessarily revealing their long-term credentials or even their identity.

We will implement Authorization Server, Resource Server, and Client as part of this Tutorial to Completely understand the OAuth2.0 Flow and implement it with Spring Security and Spring Boot.

OAuth:

OAuth Playground:

📚Course Content📚
⌚ (00:00) Introduction & What we will Build
⌚ (02:28) Understanding OAuth 2.0
⌚ (11:24) Walkthrough of OAuth 2,0 Flows
⌚ (16:24) Implementing Authorization Server
⌚ (26:25) Configuring OAuth Server
⌚ (37:31) Spring Security Config for OAuth Server
⌚ (44:28) Configuring OAuth Client
⌚ (48:04) Spring Security COnfig for OAuth Client
⌚ (55:28) Creating OAuth Resource Server
⌚ (57:10) Configuring OAuth Resource Server
⌚ (01:01:37) Configuring WebClient for Resource Server

🎟 Join this channel to get access to perks:

RECOMMENDED COURSES

BE MY FRIEND:

MY FAVOURITE GEAR:

RECOMMENDED BOOKS:

🎻 MUSIC:

#SpringSecurity #OAuth2 #OpenID #Security #DailyCodeBuffer

[DailyCodeBuffer]

If you are interested, subscribe to the plan that fits you from the above link.

[trustmebro]

I've watched AspNet Identity server videos, bootcamp videos but THIS IS THE MOST COMPLETE video on a full OAUTH implemenation because it has resource server as well. Superb. Just thanks man.. <3

[returncode]

Unbelieveable superb content, I think you just saved me in my current project at my dev job. Thanks so much ♥

[Lallushe]

FINALLY I've been waiting for this one!

[rajeevraushanprasad]

Great video 😊 I request you to please make video on Spring Security with JWT token with role based access.

[francksgenlecroyant]

Hey Shabir, the content is awesome and relevant! Thanks bro!

[ashokkumarjayaraman]

A Complex Subject! You made it simple!! Great !!!

[tobi]

Good video, rather clear.
Any idea how to implement step-up authentication?
From my client I want to ensure I get a certain Authentication context after authentication and re-authenticate using a differnet acr if needed.

[Max-zfot]

IMO video covers lot of content but from very high level perspective. May be this video should be a part of a course on Spring security where it would be easy to tie things together. Even if we exclude Spring security part, oauth/openId API flows are not highlighted to make things stand out right. I would suggest to invest time in this only if you know oauth2/openId connect and Spring security beforehand and just need a quick refresher.

[MakaraSet]

Thanks for your tutorial!
How to configure registered clients with jdbc for multiple client apps?

[avinasshbharadhwaj]

Thank you for this amazing content, great work.

[gowris]

Very great explanation hats off to you for your efforts.

[kapilnayak]

It will be useful to many developers, God bless you.

[azharmobeen]

Thanks bro for sharing this detailed and updated Spring Security tutorial, could you please guide me how can I achieve same without loginform I mean I wanted to use OAuth2 for third parties API to API communication with Client Credentials.

[devdarshana]

This is good one, much love from Singapore

[valereyoubi]

Thank you very much.
Can you please make one example in microservices architecture ? Maybe you can apply the security on you microservice project from the other video please

[rexsam]

Client can be any user accessing the app. Can you elaborate on the User Resource Owner who is providing all details? As it's slightly tricky here as I am assuming Resource can be any URL endpoint within the application or microservice that the user wish to access.

For all clients or users accessing the application, only one client ID will be used?

Since you have demonstrated one unique client ID for OAuth.

Is Bearer token created seperately for each client user accessing the application?

[shivanshuverma]

Great explanation, Consider this :
If I have two client apps registered in auth server with contexts say /app1 and /app2. Now when I hit /app1 it redirects me to login page, when I log in for app1 I want it to automatically authenticate me for app2 as well. how can I achieve sso kinda thing ?

[vageeshanvageesh]

Can you please do a tutorial based on OAuth 2.0 with JWT token

[RajeshKumar._.]

In which video you have created the spring security client, from 17:00 mins it somewhat started confusing me.