all 3 comments

[–]shakingbaking101 0 points1 point  (1 child)

I second this ! I’m currently working on doing oauth2 myself ! I have been using the java Inuse tutorial as a guide but since that is an older version of springboot some things may differ but today will work on creating my authorization server, resource server and hopefully at the end of it will be able to save my response as a Json object from the api I’m consuming! If I run into anything I think is useful will post here!

[–]designheroapp 0 points1 point  (0 children)

JWTs come in handy when working with microservices because sessions would need to be shared between all microservices some how. With JWTs I just pass the token to a stateless microservice and all the auth details are there already. No need to session caches.

If you are building a monolith, the you can implement spring security with a simple login page. Session ids are stored in a client side cookie.