SpringSecurity on SivaLabs

Spring Security OAuth 2 Tutorial - 10 : Service to Service Communication using Client Credentials Flow

Mon, 09 Oct 2023 00:30:00 +0000

In this article, we will learn how to implement Service to Service Communication using Client Credentials Flow. We will create the archival-service in which we will use a scheduler job to invoke the messages-service APIs to archive the messages. For implementing this, we will use Client Credentials Flow.

Spring Security OAuth 2 Tutorial - 9 : Invoking Secured Resource Server APIs from Client Application

Fri, 06 Oct 2023 00:30:00 +0000

In the previous articles, we have created messages-webapp and messages-service and invoked API endpoints using Postman. In this article, we will learn how to invoke the secured messages-service API endpoints from the Client application messages-webapp.

Spring Security OAuth 2 Tutorial - 8 : Securing Resource Server

Mon, 02 Oct 2023 00:30:00 +0000

In the previous article, we have created messages-webapp and secured it with Spring Security OAuth 2.0 using Authorization Code Flow. In this article, we will create messages-service, which is a Spring Boot Resource Server, and secure it with Spring Security OAuth 2.0.

Spring Security OAuth 2 Tutorial - 7 : Securing Spring MVC Client Application

Thu, 28 Sep 2023 03:30:00 +0000

In this article, we will create messages-webapp which is a Spring MVC + Thymeleaf web application and secure it with Spring Security OAuth 2.0 using Keycloak.

Spring Security OAuth 2 Tutorial - 6 : Microservices Sample Project Setup

Thu, 28 Sep 2023 00:30:00 +0000

In the previous articles, we have learned about various OAuth 2.0 / OpenID Connect flows using web browser, cURL and Postman. Now it’s time to put what we have learned into practice. What better way to do that than to build a sample project?

Spring Security OAuth 2 Tutorial - 5 : Implicit & Resource Owner Password Credentials Flows

Wed, 27 Sep 2023 03:30:00 +0000

In the Part 4: OAuth 2.0 Authorization Code Flow with PKCE, we learned how to acquire access_token using Authorization Code Flow with PKCE.

In this article, we will explore how to use Implicit Flow and Resource Owner Password Credentials Flow.

Spring Security OAuth 2 Tutorial - 4 : Authorization Code Flow with PKCE

Wed, 27 Sep 2023 00:30:00 +0000

In the Part 3: OAuth 2.0 Client Credentials Flow, we learned how to acquire access_token using Client Credentials Flow. In this article, we will explore how to use Authorization Code Flow with PKCE.

Spring Security OAuth 2 Tutorial - 3 : Client Credentials Flow

Mon, 25 Sep 2023 00:30:00 +0000

In the Part 2: OAuth 2.0 Authorization Code Flow, we learned how to authenticate a user using Authorization Code Flow.

In this article, we will explore how to use Client Credentials Flow that is typically used for Service-to-Service communication without any user (Resource Owner) context.

Spring Security OAuth 2 Tutorial - 2 : Authorization Code Flow

Sun, 24 Sep 2023 00:30:00 +0000

In the Part 1: Getting familiar with OAuth 2 concepts, we learned how to set up Keycloak, created a realm, a client with Standard flow enabled and a user. In this Part 2, you will learn how to authenticate a user using Authorization Code Flow.

Spring Security OAuth 2 Tutorial - 1 : Getting familiar with OAuth 2 concepts

Fri, 22 Sep 2023 00:30:00 +0000

Security is a complex topic to understand in-depth. In addition to that, implementing security for complex microservices based systems using OAuth 2.0 and OpenID Connect specs is even harder. Frameworks and libraries, like Spring Security, help to reduce the complexity, but still there is a steep learning curve to understand how to properly implement security.