Spring Cloud Gateway with OAuth2 Authorization Server | Authorization Server with Spring Security 2

In this video I will create a Spring Cloud Gateway application connected to an OAuth2 Authorization Server. I will use an existing OAuth2 Authorization server and create a Spring Cloud Gateway application from scratch to consume data from a Resource Server.

Content:
* Create a Spring Cloud Gateway application with the OAuth2 dependency;
* Configure Spring Cloud Gateway to connect to an OAuth2 Authorization server;
* Route some requests to a Resource Server with the Security Token;
* Use the Spring Cloud Gateway as an API without any associated frontend.

My Desktop:
• Laptop: Macbook Pro 16' 2019

[elierescobar]

Genial el vídeo, la idea llega perfectamente al que lo ve, siempre y cuando se visualice el vídeo anterior. Estoy muy pendiente a tu contenido ☺️ espero que subas videos más seguido. Saludos

[damedomey]

Nice video. I really love the fact that you don't use localhost:port everywere and spring or client as provider name. It's very clear.

[mqyusgj]

muchas gracias, fue muy util el video, me ayuda a aclarar cosas en mi trabajo

[collinsboniface]

Thanks a lot may God Bless you brother

[imsKo]

Hi, thank you for the amazing tutorial!
Do you know if is possible to add a prefix or customize the oauth2 uri entry point with the gateway?
By default its set at but, can it be edited to instead?

[siyu]

Man you make complicated thing looks eazzzieeee.

[AlexSilva-zsul]

I'm not sure how the front-end will deal with the request with the code, coming back to the gateway. I used to see the request with the authorization code come back to the front-end, and then, It will get the token.

[dogomation]

Shouldnt we use client credentials grant type for microservices Authorization?

[saidoubarry]

Hello
Which java version did you use ?

[Tmumbach]

Hello, great video! Using gateway as oauth client, how to authenticate and consume the api using Postman or insomnia? Thanks!

[abdulkhalik]

How to make different client id and secret for different client apps. In your example each app has the same client id and secret

[himmelsdj]

Hi Segio, first I thank you for the time you dedicated to share such precious knowledges with the community. I just don't understand the configuration of keycloack inside the application.yml of the backend-keycloak-auth. What are the DB_DATABASE, DB_USER, DB_SCHEMA, DB_PASSWORD, KEYCLOAK_USER, KEYCLOAK_PASSWORD in the kc properties ? Where is that database used for and what data does it store ? Should I create another database keycloak_db different from the authdb I created in the first video for backend-auth ? Thank for this useful tutorial.

[marziehghadirinia]

Hi Sergio.
Thank you for your great teaching. Is it possible for you to explain about the service to service relationships with oauth2.Thank you in advance.

[collinsboniface]

"1 unavailable video is hidden" is there the next Video in this playlist

[anhemcoder]

/**
* For the backend-resources, I indicate that all the endpoints are protected.
* To request any endpoint, the OAuth2 protocol is necessary, using the server configured and with the given scope.
* Thus, a JWT will be used to communicate between the backend-resources and backend-auth when backend-resources
* needs to validate the authentication of a request.
*/

If /api/public/** how will it be configured? Pls

[carlosh]

me gusto el video, si me aclaró unas cosas, pero si alguien me puede resolver una duda si yo poseo el authorization server, bueno es decir todo, el registro del cliente se sigue haciendo desde el api gateway? o es en ambos lados?, si es para una plataforma web sería necesario ponerlo en el api gateway o solo se usa directamente el microservicio? :( igualmente gracias por el contenido

[muhammadarifnasution]

thanks for the awesome tutorial
can you share also how to login into auth server via api?
thanks

[shahrzadkhorrami]

Hello, Thanks for your great videos. I am testing your codes, what is the password for sergio?

[marypaul]

Hi, i send you an email kindly hope you see it on the email address provided on your channel