Rest API with JWT Access & Refresh Tokens | Spring Boot, MongoDB

Learn how to create a Java API backend with authentication and authorisation using JWT tokens, Spring Boot & MongoDB.

[aadixum]

Hi,
I am getting this error in the WebSecurityConfig.java file:
The method addFilterBefore(Filter, Class<? extends Filter>) in the type HttpSecurity is not applicable for the arguments (AccessTokenFilter,

[GROOVETECHSETS]

Thank you! Great tutorial. Would be nice if in the next video you use a bigger font size :)

[FireTvAccount-or]

Hey @codingwmax! Could you do me a favor and recreate this video using Spring Boot 3 and Security 6? It'll be really helpful for beginners like myself. Oh, and big thanks for sharing this incredible project!

[martintreeman]

I can confirm it works.
It's a really HUGE thing though, I thought I could easily integrate that into my Web Apps Design classes project, but it seems it's gonna take me a while...

[davidmachek]

Hey Max, great video, I like your straight to the business approach. Is there any chance, you would revisit this video in future with the Spring Security 5.7+ update? Things like WebSecurityConfigurerManager have become deprecated ever since. Keep up the great work, love your videos!

[maneshipocrates]

Thanks for the great tutorial. A bit too fast and your screen is too tiny for someone to follow. And WebSecurityConfigurerAdapter is actually deprecated in this version.

[feli_le_saint_du_desatre]

Great video, maybe you have some example with @PreAuthorize for Roles?

[Ands]

Thank you very much! Excellent lesson. Is there a chance to see more of yours? )

[aniketmore]

I think You are making a database call on every request in the filter to find out the user object i don't think that is efficient and instead you can decode jwt and use it as the user object check out express-jwt middleware for see how they do it

[sudheerkumar]

Thanks for great tutorial. I have one question here. What if user closes the browser tab instead of clicking on logout? How do we clear the refresh and access tokens? What would be the standard process?

[arikfalcon]

Thannks bro, great tutorial, but font size is too small, please increase font size next time, its hard to see on small screen.

[SaketTiwari-odjc]

sir, i getting error Please add retryWrites=false how to fixed....

[dinobulja]

impossible to see, to high resolution, most of screen taken by empty of code area . To fast, difficult to follow

[stefancfefo]

Hello kind sir, can you put in the description the github link to this project?
Sorry for my English

[mccayl]

Hi. Should I store the refresh token in the database? I guess they should be stored on the client side, in cookie for example

[blpmarques]

private User owner;

This is @ManyToOne?