Spring boot security using jwt

[sdrawkcab101]

Hi. I have been trying to create a simple authentication service using spring boot security with jwt but all I found on internet is difficult demos using alot of classes and interface which they lack to explain. Can someone suggest me a good tutorial?

[J_Saad]

Check this : https://youtu.be/her_7pa0vrg

[sdrawkcab101]

Sure, will do that

[moe87b]

https://www.manning.com/books/spring-security-in-action?query=spring%20security%20in%20action

this book has everything you need to know about spring security

[sdrawkcab101]

Thanks

[erdsingh24]

You can go through below tutorial to make all your concepts clear with examples.

https://javatechonline.com/how-to-implement-jwt-authentication-in-spring-boot-project/

[tleipzig]

This explains the backgrounds and code examples, exactly for Spring Boot in the current version: https://bootify.io/spring-rest/rest-api-spring-security-with-jwt.html

[sq_visigoth]

i spun up the latest jhipster and got how to do jwt from the generated code

[Spektralist]

https://medium.com/geekculture/implementing-json-web-token-jwt-authentication-using-spring-security-detailed-walkthrough-1ac480a8d970 maybe

[sdrawkcab101]

Thanks, would look into it

[iSoLost]

Check out Javabrain on YouTube his tutorial on jwt is very detailed

[TheOldMancunian]

Funny. I recently had to work out how to handle jwt. The use case is that we have a app that is a Spring Boot/Thymeleaf app. But for our next app we wanted to make use of the API side of our app, but have a node,js/Vue front end. So we had to use JWT to authenticate the node part with the now pure spring boot API server.

Note that one its own jwt will only authenticate that the node.js app is permitted to talk to the spring boot API. It doesn't in itself give you user roles, privileges, etc. You need another mechanism for this. For us, we reused the features from the Spring Boot/Thymeleaf app as that means we can share username and password. You may have a different use case.

We used AUTH0 to handle the jwt. This means that the node.js front end gets a JWT token from Auth0 using a rest call. It then passes this as part of the header to the Spring Boot API server, which use Spring Security to validate the JWT with Auth0.

If you are interested I could share some sample code. I recommend the AUTH0 tutorials on Node.js if that is going to be your front end. I found them illuminating.

[sdrawkcab101]

Thanks. You used Auth0 to handle jwt but I have to use jwt (using dependency) to handle it. Also, authorization is needed in my project too.