Securing OAuth 2.0 Resources in Spring Security 5.0

แชร์
ฝัง
  • เผยแพร่เมื่อ 19 ม.ค. 2025

ความคิดเห็น • 36

  • @qwalers
    @qwalers 5 ปีที่แล้ว +4

    The only and best tutorial about Spring Security 5.0 with OAuth2 and JWT with IAM/UAA server

  • @kappaj01
    @kappaj01 5 ปีที่แล้ว +3

    Great presentation guys. Some excellent information to get you going as well. Keep up the good work!

    • @anderskamden857
      @anderskamden857 3 ปีที่แล้ว

      You probably dont give a shit but does someone know a tool to get back into an Instagram account??
      I stupidly forgot my password. I would love any tips you can give me.

    • @roycelouie3786
      @roycelouie3786 3 ปีที่แล้ว

      @Anders Kamden Instablaster :)

    • @anderskamden857
      @anderskamden857 3 ปีที่แล้ว

      @Royce Louie Thanks so much for your reply. I got to the site on google and Im trying it out now.
      Looks like it's gonna take quite some time so I will reply here later with my results.

    • @anderskamden857
      @anderskamden857 3 ปีที่แล้ว

      @Royce Louie It did the trick and I finally got access to my account again. I'm so happy!
      Thanks so much you saved my ass !

    • @roycelouie3786
      @roycelouie3786 3 ปีที่แล้ว

      @Anders Kamden happy to help :D

  • @flatmapper
    @flatmapper 4 ปีที่แล้ว +2

    15:28 is it available not only in spring data repos?

  • @pranavkhandelwal4783
    @pranavkhandelwal4783 2 ปีที่แล้ว

    Very informative and helpful video. Thanks a lot.

  • @rajatagrawal141
    @rajatagrawal141 5 ปีที่แล้ว +3

    where is the github link for this project please someone provide me

  • @kennethmarete5329
    @kennethmarete5329 3 ปีที่แล้ว

    Why are we scrapping off the oauth2 and resource server on spring 2.5.6 and above?

  • @samuellarico5364
    @samuellarico5364 3 ปีที่แล้ว

    You guys are amazing, my life was saved

  • @mikeklein4810
    @mikeklein4810 5 ปีที่แล้ว +6

    To all those triggered by Spring...if you dont like the water stay out of the pool! Spring is THE best way to deal with the complexities of developing distributed applications. It's a work of art.

  • @sebastianszczebiot345
    @sebastianszczebiot345 4 ปีที่แล้ว

    Can you help me plese?
    After running: .\gradlew -b uaa-server\build.gradle cargoRunLocal
    I get such an error: org.codehaus.cargo.container.ContainerException: Failed to start the Tomcat 8.x container. Check the [C:\Users\sszczebiot\IdeaProjects\untitled\messaging-app\uaa-server\uaa-server.log] file containing the container logs for more details.

  • @mageulgu5322
    @mageulgu5322 4 ปีที่แล้ว +2

    SOURCE CODE : github.com/jgrandja/oauth2-protocol-patterns

  • @emmanuelogoma2595
    @emmanuelogoma2595 5 ปีที่แล้ว +1

    where is the repo

  • @arithmeticerror
    @arithmeticerror 6 ปีที่แล้ว

    @Josh Cummings
    Guys you make changes in resource server & restart client and say its working as expected (timestamp 44:03). The one assumption both the presenters are making is everyone who is watching the video knows the overall application they are using, the client aspect & are well versed in each aspect of oauth, which is not at true
    Rob's presentations used to be so good when it comes to Spring Security. Now a days, the presentations are mere presentations, with very little emphasis on making them understandable

  • @Gregor_205
    @Gregor_205 4 ปีที่แล้ว

    Is that ok to have spring security 5.1.0.RELEASE as a dependency, and call a video Spring Security 5.0?

  • @LennarthAnaya
    @LennarthAnaya 5 ปีที่แล้ว +1

    "with several nuances and subtleties that can make it overwhelming for implementers"... right, to be honest, hopefully this video will help, thanks

    • @LennarthAnaya
      @LennarthAnaya 5 ปีที่แล้ว

      the thing that overwhelms me is when there are those many ways of doing the same thing, there are approaches in this video I haven't seen in other examples, I'd like to have a big picture idea, I think we have to have two databases, one on the authorization server, the other on the resource server, both handling end user data, but I'm not sure if I'm doing it wrong.

  • @rydmerlin
    @rydmerlin 4 ปีที่แล้ว +1

    Is there a better tutorial on this topic than this one? This doesn't appear to be a topic that lends itself well to a bottom up explanation. By all means start with some Restful services that don't require authentication and then go thru the steps necessary to provide it. I also find the way the code is displayed to be difficult to follow and there's generally too many context switches to follow what's going on.

  • @vtvkerala
    @vtvkerala 5 ปีที่แล้ว +5

    Makes things difficult..

  • @braiekaymen2524
    @braiekaymen2524 6 ปีที่แล้ว +5

    please link for code

    • @svichkar_tech
      @svichkar_tech 6 ปีที่แล้ว +7

      here you go!
      github.com/jzheaux/messaging-app/tree/springone2018-demo

    • @sucountary
      @sucountary 5 ปีที่แล้ว

      @@svichkar_tech Thanks for code but while running server Resource_Server project,I am getting below error :
      Caused by: org.springframework.beans.BeanInstantiationException: Failed to instantiate [javax.servlet.Filter]: Factory method 'springSecurityFilterChain' threw exception; nested exception is java.lang.IllegalArgumentException: Unable to resolve the OpenID Configuration with the provided Issuer of "localhost:8090/uaa/oauth/token"
      at org.springframework.beans.factory.support.SimpleInstantiationStrategy.instantiate(SimpleInstantiationStrategy.java:185) ~[spring-beans-5.1.0.RC3.jar:5.1.0.RC3]
      at org.springframework.beans.factory.support.ConstructorResolver.instantiate(ConstructorResolver.java:619) ~[spring-beans-5.1.0.RC3.jar:5.1.0.RC3]
      ... 21 common frames omitted
      Caused by: java.lang.IllegalArgumentException: Unable to resolve the OpenID Configuration with the provided Issuer of "localhost:8090/uaa/oauth/token"
      at org.springframework.security.oauth2.jwt.JwtDecoders.getOpenidConfiguration(JwtDecoders.java:78) ~[spring-security-oauth2-jose-5.1.0.RELEASE.jar:5.1.0.RELEASE]
      at org.springframework.security.oauth2.jwt.JwtDecoders.fromOidcIssuerLocation(JwtDecoders.java:48) ~[spring-security-oauth2-jose-5.1.0.RELEASE.jar:5.1.0.RELEASE]
      at sample.config.ResourceServerConfig.jwtDecoder(ResourceServerConfig.java:64) ~[main/:na]
      at sample.config.ResourceServerConfig.configure(ResourceServerConfig.java:56) ~[main/:na]
      Do you have any idea ???

    • @achyuthkodali3194
      @achyuthkodali3194 4 ปีที่แล้ว +1

      @@svichkar_tech you are a hero mate.. :)

  • @nikhilkant123
    @nikhilkant123 5 ปีที่แล้ว +1

    The presentation is really great .please share the code link.

  • @premierde
    @premierde 5 ปีที่แล้ว

    where is the git repo.

  • @guseynismayylov1945
    @guseynismayylov1945 6 ปีที่แล้ว +5

    This framework is just ugly

    • @aiwprton805
      @aiwprton805 6 ปีที่แล้ว +1

      What are the alternatives?

    • @giuseppemiragliotta5222
      @giuseppemiragliotta5222 6 ปีที่แล้ว

      @@aiwprton805 Pray

    • @aiwprton805
      @aiwprton805 6 ปีที่แล้ว +1

      @@giuseppemiragliotta5222 Play Framework? Then need to know Scala well.

    • @rajatagrawal141
      @rajatagrawal141 5 ปีที่แล้ว

      hey anyone can help me learn security please i need some support