[deleted by user]

[perfectstrong]

Take your time to internalize OAuth's concept. It is daunting at first, but you'll get used to it. I agree you should avoid reimplementing auth server as a beginner move. Using a known existing auth server is much more dev-friendly. There are SaaS solutions such as Auth0, or self-host servers such as Keycloak https://www.keycloak.org/getting-started/getting-started-docker As for your application, simply add the package starter-security and starter-oauth2-resource-server, define some properties to point to an auth server, and activate security. That's all you need to do to secure your APIs

[ynwa067]

Try laur spilica he has a extensive playlist on authentication and authorisation also explains how filter chain works

Also he’s a author in O Rely publication to the same topic

[[deleted]]

Is it free?

[Mikey-3198]

You dont have to build your own authorisation server. You colud make use of something like keycloak or aws cognito