How to Easily Secure Your Fullstack ReactJS - Spring Boot Application With the JWT Authentication

This is a video where I build both parts, the frontend with ReactJS and the backend with Spring Boot 3 and Spring Security 6. I will implement the JWT authentication to secure my application switching from the backend to the frontend as a fullstack developer will do.

Chapters:
00:00:00 Introduction
00:00:20 Explanation
00:02:35 Frontend Project
00:08:15 App Content Component
00:09:09 Welcome Content Component
00:12:10 Backend Project
00:14:16 Requesting Backend
00:18:01 CORS
00:22:33 Login Form
00:33:10 Display Logic
00:38:51 Security Configuration
00:41:28 Exception Handler
00:43:07 JWT Auth Filter
00:45:48 User Auth Provider
00:50:07 User Service
00:57:18 Password Encoder
00:57:46 AOP
00:59:09 Database Configuration
01:01:28 Authentication Endpoints
01:03:53 Using the JWT
01:05:33 Demo

[marinemanga]

I just want to come back here and let everyone know how awesome your content is. I will be attentive to all of your new video uploads. Easily the best tutorial I've seen on Spring Boot JWT Authentication.

[ydsxyfr]

You're a magician bro! Hope you get more subscribers because you deserve it.

[davidl]

Thanks so much Sergio,
Finally I got to understand the concept and the application of JWT in fulllstack app with your tutorial!, ¡Regards/Saludos!
😀

[cpratham]

Sergio, you are a great teacher. thank you

[walter.hrnndz]

I've been fighting cors issues, I've tried various examples I've seen and none of them worked, yours did. Thanks for that, I'd say you saved me! 😅

[artminh]

Thank you so much, bro!!!! I will continue to follow you! <3

[LoganyKim]

너무 너무 멋진 강의입니다. 저는 영어를 잘 못해서 자동 번역 자막으로 봤습니다. 아마 제가 모든 내용을 정확히 이해하지는 못했을거 같아요. 하지만 한국에 있는 어떤 자료보다 이 자료가 가장 잘 이해가 잘됐습니다. 무료로 볼 수 있어서 너무 좋았어요. 감사합니다.

[WaddupBoi]

I'm new to auth and springboot so this video is perfect, a bit beyond my capabilities at the moment but hopefully I'll get the hang of it soon (I can't believe you're using class components for react 😅)

[farzadtotonchi]

awsome video, a graet quide thank Sergio.

[mohammadmutawe]

Wow really helpful, Thanks a lot for sharing..
Thanks again for pushing your code to Github : - )

[ivandvoinenko]

It was a good video. I've seen a few with Jwt, but this one had a little bit of another approach. I guess you should add roles to the User entity because you often have different options and front-end should render different components/pages for ROLE_USER and ROLE_ADMIN as well as functionality will vary depending on the role.

[dalcod]

Great content, keep them coming. The class based React components are horrible though - thank God they've changed their mind on this.

[nurlantalatli]

Sergio such a great content. I am trying to develop a full stack application & saw your work on Keycloak. I am doing more research but what is your experience, is Keycloak more secure than this method ?

[anyicleanup]

Great demo. Thanks, Sergio. I do have a question. For the backend Spring Boot, I read in a book that if you didn't provide a UserDetailsService, that means the default InMemoryUserDetailsService gets used. Is that the case here?

[maYoutubeTube]

This is a great video. But it would be wonderful if you could include features like handling expired tokens and also features to refresh expired token. Role is also important. I hope you will include those features in other videos and prepare play list.
Thank you

[tammodirksen]

This is awesome! Can you make a video building a full stack app using React and Spring and use msal Java to obtain Azure Credentials to call Microsoft Graph? I feel like a lot of people do OAuth stuff on the Frodo tend side and don’t realize that it should be done on the backend side

[ZombieGamerRealm]

Thank you so much for your guide!
Would u kindly to give a hint how to use it with standart spring form without FE ? ^_^

[rydmerlin]

Is axios always needed when communicating with a backend? Also does your browser ever persist the token to disk?

[subrahmanyahegde]

Hey Awesome video!!
And quick doubt : Why are we checking the user by login method? Shouldn't we check with the user email or both?

And also can you do a video on login using google or fb or any other? oauth2?

[Chris-njeq]

Would it possible for you to post an updated video? Running into issues where the new spring security depreciated since version 6.1