Skip to content

Latest commit

 

History

History
54 lines (39 loc) · 2.06 KB

readme.md

File metadata and controls

54 lines (39 loc) · 2.06 KB

Spring boot security with JWT example

this example is NOT based on OAuth2

important to know

  • In this example I configure web-security with the new component-based configuration.
  • Please note that the WebSecurityConfigurerAdapter has been deprecated since Spring Boot v 2.7
  • I did not include any tests at the moment, as the intention was to demonstrate how to configure web-security with JWT.

About this example

This simple project is built with the idea in mind that we will be storing some users with different authorities in a database and use them to allow/deny access to some end points accordingly. the project has:

  • a simple Rest API to reach end-points.
  • a simple Entity POJO with it's services and repositories.
  • a security layer. Some dummy data is added using Java Faker

Dependencies:

Nothing fancy some basic dependencies:

Dependency artifactId version
Spring Data JPA spring-boot-starter-data-jpa
Spring Security spring-boot-starter-security
Spring Web spring-boot-starter-web
MySQL Connector mysql-connector-java
lombok lombok
Java Faker javafaker 1.0.2
auth0 JWT java-jwt 4.0.0

The workflow

  • Each user will have a list of roles wich will allow/deny access to end points accordingly.
  • authenticating will be user-name / password based.
  • authorization will be based on user's authorities using the access token.
  • the process will generate an access token and a refresh token
  • The user will be able to log in and get the tokens needed.
  • both acc/refresh tokens will have expiration time.

Next:?

next example will utilize the OAuth2 soon.

You can visit my portfolio to know more about me.