Spring Security Fundamentals - Lesson 17 - Multitenancy - Part 1

preview_player
Показать описание
In this stream, we discuss Spring Security using the latest available version in 2022. We'll discuss configurations for authentication and authorization, tips and tricks, how to learn Spring Security, vulnerabilities, OAuth 2, and many more.
Рекомендации по теме
Комментарии
Автор

Laur I am a huge fan of your work. Your lessons are best and most advanced material I can find out there. Are you maybe planning to do lesson series about persistence? I know you have several lessons, regarding that, but lesson series starting from jdbc, ending with hibernate/jpa locks, transaction managment and how spring boot manages everything under the hood would be amazing.
Thanks again for your videos.

heravaha-zxou
Автор

Is it possible to configure the authorization server in order to make it print an explicit error message when the authorization code flow ends with an error ?

lenigaussgauss
Автор

If user want to login with Google, Do we have to save google as a client in Database and retrieve data and process it just as we did with spring auth server or we can do it with single authorization server that includes both spring auth server and google auth server?
How do we show Login with google in spring security login page?

siyu
Автор

Hi Laur thanks for the videos I have a question for you when I want to use Google as an authorization server and get id token using angular as a client I mamaged to validate the token using spring boot as a ressource server what I do not understand is how can set roles to the user if it is not on my database because the id token of google doesn't have authoroties claim in it how can I solve this problem by your approach should generate another custom jwt.?

kirzxoh
Автор

Thanks Laur. I use websocket with spring boot, how do I secure the endpoints? I also have entities with createBy and lastModifyBy properties, how do I put the user in the security context and retrieve it in AuditorAware which automatically updates createdBy and lastModifyBy when I save data to the database in the message-handling methods of websocket

HoangAnh-btfk
Автор

Thanks for this video Laur, will this work in a case where only one server is an authorization server but the other is a basic jwt authentication on the resource serever itself?
How does it know where to get the keys to decode the jwt?

benacq
Автор

What is the common way to configure authorization servers where there are thousands of tenants? Looking at B2B enterprise application. Surely configuring using code is not feasible.

MirzaInkiad
Автор

Hello Sir. Please, how do you generate the code_challenge and the code_verifier ?

lenigaussgauss