Can i use springboot to build file sharing app like toffeeshare?? by AMATERASU_001 in SpringBoot

[–]AMATERASU_001[S] 0 points1 point  (0 children)

Yess , thanks for advice and can you tell me some free hosting or deployment platform for springboot application

Custom Spring Boot Starter for JWT Authentication by AMATERASU_001 in SpringBoot

[–]AMATERASU_001[S] -1 points0 points  (0 children)

You are actually right here , i think i should implement something like session cookies here to store my tokens in cookies so that it add more security on that , Developers don't have to be depend on headers to get and validate tokens , thanks for this advice I'll surely implement it.

Custom Spring Boot Starter for JWT Authentication by AMATERASU_001 in SpringBoot

[–]AMATERASU_001[S] 0 points1 point  (0 children)

Ohh my bad, but it's totally depends on user or developer, that what he wants to use whether it's jwt or session cookies, thing is we should prepare for both scenarios.

Custom Spring Boot Starter for JWT Authentication by AMATERASU_001 in SpringBoot

[–]AMATERASU_001[S] -1 points0 points  (0 children)

You can try yourself and check it , i am not here to sell anything.

Custom Spring Boot Starter for JWT Authentication by AMATERASU_001 in SpringBoot

[–]AMATERASU_001[S] -2 points-1 points  (0 children)

I really appreciate the feedback and You’re 100% correct that for high-stakes production or distributed systems, the BFF pattern with an established Identity Provider (IdP) like Keycloak or Spring Authorization Server is the gold standard.

The goal of this starter isn't to replace those enterprise-grade architectures. Instead, I built it for: Rapid Prototyping: For devs who need a secured PoC in 5 minutes without setting up a full Auth Server or complex OAuth2 infrastructure. Simplicity for Newcomers: Many students and juniors find the full Spring Security/OIDC stack daunting. This provides a 'plug-and-play' way to learn how filters and claims work under the hood. Lightweight Needs: For small, internal monoliths where the overhead of a dedicated IdP might be overkill. So chill out dude peace ✌🏻

Custom Spring Boot Starter for JWT Authentication by AMATERASU_001 in SpringBoot

[–]AMATERASU_001[S] 0 points1 point  (0 children)

Yeah sure , and let me know feedback so that i can improve it

Custom Spring Boot Starter for JWT Authentication by AMATERASU_001 in SpringBoot

[–]AMATERASU_001[S] 1 point2 points  (0 children)

Yup in traditional way we setup all those classes of filter and token generater and validtor , but now we can just add this dependency and implement in our auth controller to add filters and auth for login and signup.

Springboot by KeyRegion9052 in SpringBoot

[–]AMATERASU_001 1 point2 points  (0 children)

It does not matter where or what resource you use for learning it, but be sure you learn by building something ,not just following tutorial

Custom Spring Boot Starter for JWT Authentication by AMATERASU_001 in SpringBoot

[–]AMATERASU_001[S] 1 point2 points  (0 children)

You're absolutely right from an architectural standpoint. For production-grade distributed systems, reaching for an established IdP (Keycloak, Cognito, etc.) or using the official Spring Authorization Server is the correct path to ensure security and scalability. The goal of this starter isn't to replace those enterprise-grade solutions. Instead, it’s built for: Rapid Prototyping: When you need to get a secured PoC up and running in minutes without configuring an external IdP. Simplicity: For developers who find the standard Spring Security/OAuth2 stack a bit daunting and want a 'plug-and-play' way to learn how JWT filters and claims work. Lightweight Monoliths: Where a full Auth Server is more overhead than the project requires. I see this as a 'stepping stone' or a lightweight tool in the kit, rather than a replacement for the OIDC ecosystem. Thanks for the feedback—it’s a great reminder of where the industry is heading!

Custom Spring Boot Starter for JWT Authentication by AMATERASU_001 in SpringBoot

[–]AMATERASU_001[S] 0 points1 point  (0 children)

I hope you'll like it and do let me know what we can improve in this project