OAuth 2.0 in Spring Boot Applications

Course Curriculum

Chapter 1: Introduction

Lecture 1: Source Code

Lecture 2: Presentation files

Lecture 3: Introduction

Lecture 4: Introduction to OAuth 2

Lecture 5: OAuth 2.0 Roles

Lecture 6: Current State of OAuth 2.0 in Spring Security 5

Lecture 7: OAuth 2.0 Client Types

Lecture 8: OAuth Access Token

Lecture 9: OAuth2 and OpenID Connect (OIDC)

Chapter 2: OAuth 2 Grant Types and Authorization Flows

Lecture 1: Introduction

Lecture 2: Authorization Code. Introduction.

Lecture 3: Authorization Code Demo. Initial Request.

Lecture 4: Important note

Lecture 5: Authorization Code Demo. Exchange code for Access token.

Lecture 6: PKCE-enhanced Authorization Code

Lecture 7: Generating PKCE Code Verifier

Lecture 8: Generating PKCE Code Challenge

Lecture 9: PKCE Demo. Requesting Authorization Code

Lecture 10: PKCE Demo. Exchanging Code for Access Token

Lecture 11: Client Credentials

Lecture 12: Client Credentials Grant Type Demo

Lecture 13: The Password Credentials Flow

Lecture 14: The Password Credentials Flow: Demo

Chapter 3: Refreshing Access Token

Lecture 1: Introduction

Lecture 2: Requesting Refresh Token that never expires

Lecture 3: Refreshing Access Token. Demonstration.

Chapter 4: Keycloak. The Standalone Authorization Server.

Lecture 1: Introduction

Lecture 2: [Updated] Downloading Standalone Authorization Server Keycloak

Lecture 3: [Updated] Starting and Stopping Keycloak server

Lecture 4: [Updated] Creating an Admin user

Lecture 5: [Updated] Creating a new Realm

Lecture 6: [Updated] Creating a new user

Lecture 7: [Updated] Creating a new OAuth Client

Lecture 8: [Updated] Configuring Client Application Secrets

Lecture 9: [Updated] Requesting Access Token and Refresh Token

Lecture 10: [Updated] Enable/Disable OAuth 2.0 Authorization Flow

Lecture 11: [Updated] OAuth 2.0 Client Scopes

Chapter 5: OAuth Resource Server

Lecture 1: Introduction

Lecture 2: Creating a new project

Lecture 3: Import project into Spring Tool Suite IDE

Lecture 4: Creating a Rest Controller Class

Lecture 5: Starting Resource Server on different port number

Lecture 6: Access Token Validation URIs

Lecture 7: Accessing endpoints with an Access Token

Lecture 8: Accessing Principal and JWT Claims

Lecture 9: Demo – Accessing JWT Claims

Chapter 6: Resource Server – Scope Based Access Control

Lecture 1: Introduction

Lecture 2: [Updated] Create WebSecurity class and enable WebSecurity

Lecture 3: [Updated] Configure basic HttpSecurity in Resource Server

Lecture 4: [Updated] Resource Server OAuth Scope-based Access Control

Lecture 5: Demo – Access Resource Server without using proper Scope

Lecture 6: Demo – Access Resource Server using proper Scope

Lecture 7: Creating OAuth 2 Scope in Keycloak

Chapter 7: Role Based Access Control with Keycloak

Lecture 1: Introduction

Lecture 2: Source code

Lecture 3: [Updated] Creating User Role

Lecture 4: Securing Endpoints to a Specific Role

Lecture 5: Creating Role Converter class

Lecture 6: Decoding JWT to find user roles

Lecture 7: Converting Roles into GrantedAuthority objects

Lecture 8: Register JwtAuthenticationConverter with HttpSecurity

Lecture 9: Trying how it works

Chapter 8: Resource Server: Method Level Security

Lecture 1: Introduction

Lecture 2: Source code

Lecture 3: Enable Method Level Security

Lecture 4: @Secured annotation example

Lecture 5: @PreAuthorized annotation

Lecture 6: Reading UserId from JWT Access Token

Lecture 7: Trying how the @PreAuthorized annotation works

Lecture 8: Creating getUser() to be used with @PostAuthorize

Lecture 9: @PostAuthorized annotation

Lecture 10: Trying how to the @PostAuthorized annotation works

Chapter 9: Resource Server Behind API Gateway

Lecture 1: Introduction

Lecture 2: Creating API Gateway Project

Lecture 3: Import API Gateway to Spring Tool Suite

Lecture 4: Configuring API Gateway Routes

Lecture 5: Trying how it works

Lecture 6: Albums & Photos Resource Servers

Lecture 7: Routing to multiple Resource Servers

Lecture 8: Trying how it works

Chapter 10: Eureka Discovery Service

Lecture 1: Introduction

Lecture 2: Creating Eureka Discovery Service Project

Lecture 3: Configuring Eureka project

Chapter 11: Configure Resource Server as Eureka Client

Lecture 1: Eureka Client Dependency

Lecture 2: @EnableDiscoveryClient and configuration properties

Lecture 3: Trying how it works

Lecture 4: Exercise

Lecture 5: Source Code

Lecture 6: Solution overview