Building a Resource Server | Spring Boot Security | OAuth2 | JWT

preview_player
Показать описание
Building a Resource Server with Spring Boot Security OAuth2 and JWT

Рекомендации по теме
Комментарии
Автор

Is am bit confused with OAuth2 resource server implementation. For any application we can have multiple microservices like for supplier, product, inventory etc and if we are implementing OAuth2 then I know there will be only 1 authentication server required for the authentication purpose but not sure if each microservice (Product, Supplier etc) will have the resource server implementation to check if the user is authorized or not for accessing the respective microservice, if it is not the case then how a single resource server can be used for all the microservices.

Think we are implementing Oauth2 using spring framework and using @PreAuthorize annotation on the exposed endpoints of the microservices.

abhishek
Автор

Good tutorial! @Talk2 Amareswaran. Please build Boot Security OAuth2 intergate webflux, mongo reactive.

TuanITkq
Автор

How resource server know who is creating token.... is not other autherization server can generate same token as it take public key for verification which is not secured so I am not sure about security... please clarify more...

hemantojha
Автор

There is no in spring boot 2, now how should i implement ResourceServer?

shreejanacharya
Автор

Hello Sir, can please help me, I used both resource and authorization server together, I generated a token but when I put in header and try to call API, I am getting "error": "unauthorized",
"error_description": "Full authentication is required to access this resource"
Please help me sir I am trying from last 10 days. I already watch your that authorization server video more than 20 times, but I am not able to find where is the mistake.

ShubhamKumar-lgoc
Автор

Hi Amareswaran, nice video...
Can you extend your resource server such that it can authenticate from Facebook/Google oauth provider?

RajShah
Автор

Hi, thanks for the video, its a saviour with awesome explanation. I just copy pasted it the way it is and it works like a charm. However, I have a few questions, we have to deliver a project on production by first week of june and we are really short of time, so it would be helpful if you could suggest on what changes are needed in the project to make it production ready ? I have been struggling to get the oauth security implemented, followed several tutorials, however i dont have much time left to explore it in deep and then implement, so it would really be great if you could tell me whats needed to make it production ready. Thanks in advance

SurajKumar-kuee
Автор

Thanks for the video, I have a Qus sir. what happens if access token gets expired? How does Resource server react and what is the role of refresh token in this case?

VIVEK