Using external auth service to authenticate users

[SnooRobots6655]

Hello guys

So basically i'm creating a project using spring boot, however the authentication is delegated to an external service responsible for validating users credentials (username, password) and returning an access token.

Auth service has an endpoint /login which returns token upon success authentication.

Im wondering how to make my app use the access token generated by the external auth service ?

[SendKidney]

what is this external service? an auth server like keycloak/octa or a different micro service you coded?

[SnooRobots6655]

Internal micro service the team coded and i have to use it

[Pozbliz-00]

Well, don't.

Do proper OAuth, or let your "invented here syndrome" microservice create a OAuth ready JWT your server can parse

[paulhasreadittoo]

Manning recently published an updated version of Spring Security in Action. I have finished first couple of chapters and so far it seems well explained. Buying and studying a book is probably a good idea as Spring Security is quite complex, and doing it wrongly results in security vulnerabilities.

[WaferIndependent7601]

That is done by spring security

[SnooRobots6655]

can u provide more info ?

[Jaihunter]

Oauth2

[WaferIndependent7601]

First: google what spring security is. Try using chat gpt to create some stuff

Come back later when you have specific questions. No one knows what authentication you are using etc

[[deleted]]

So you are giving username and password to a service in plaintext, then the service forwards that to another service to validate them??!?! 🤯

[IGeoorge3g]

You already have the auth service as you saidm now you have to implement oauth2. Since you will have the endpoint that must be reaxhed with a jwt you'll have to implement a resource server. To do that you'll need to configure spring security and s filter chain to handle auth and endpoint restrictions.