dev-resources.site
for different kinds of informations.
Spring Oauth2 - App-Token based Hybrid Token Verification Methods
Published at
1/12/2025
Categories
springsecurity
springboot
java
oauth
Author
andrewkangg
Author
11 person written this
andrewkangg
open
If you’re struggling to set up a persistence-based OAuth2 module, consider trying
https://github.com/patternhelloworld/spring-oauth2-easyplus
- App-Token based easy OAuth2 implementation built to grow with Spring Boot
- Complete separation of the library and the client (Library : API, Client : DOC, Integration tester)
- Extensible: Supports multiple authorization servers and resource servers with this library.
- Hybrid Resource Servers Token Verification Methods: Support for multiple verification approaches, including API calls to the authorization server, direct database validation, and local JWT decoding.
- Immediate Permission (Authority) Check: Not limited to verifying the token itself, but also ensuring real-time validation of any updates to permissions in the database.
- Authentication management based on a combination of username, client ID, and App-Token : What is an App-Token? An App-Token is a new access token generated each time the same account logs in. If the token values are the same, the same access token is shared.
- Separated UserDetails implementation for Admin and Customer roles as an example. (This can be extended such as Admin, Customer, Seller and Buyer… by implementing UserDetailsServiceFactory)
- Authorization Code Flow with Optional PKCE, Authorization Consent and Single Page Application (XMLHttpRequest)
- ROPC for scenarios where accessing a browser screen on the server is either unavailable or impractical
- Application of Spring Rest Docs, Postman payloads provided
springsecurity Article's
30 articles in total
Understanding Spring Security and OAuth 2.0
read article
Spring Oauth2 - App-Token based Hybrid Token Verification Methods
currently reading
App-Token based easy OAuth2 implementation built to grow with Spring Boot
read article
Apache wicket with spring boot example application: notice board
read article
Spring Security: CSRF protection
read article
Mastering End-to-End Transactional Functionality in Spring Boot with Examples
read article
Spring Security: Redirect to login page if access pages which is for authorized user only
read article
Understanding the Spring Security Architecture
read article
Spring security
read article
Implementing Token-Based Authentication in Spring Boot Using Spring Security, JWT, and JDBC Template
read article
Implementing One-Time Token Authentication with Spring Security
read article
Login system with JWT token and email reset password
read article
Keycloak and Spring Boot: The Ultimate Guide to Implementing Single Sign-On
read article
Securing Your Spring Boot Application with Spring Security
read article
Guia básico de Spring Security
read article
OAuth2.0 Spring Boot
read article
Spring Boot Caching Simplified: How to Use JetCache Effectively
read article
OAuth 2 Token Exchange with Spring Security and Keycloak
read article
Implementing Spring Security in Microservices Architecture: A Deep Dive
read article
Mastering Spring Security: A Comedy of Errors (and Authentication)
read article
Spring Security For Beginners — Part 2
read article
Spring Boot with VueJS with Spring Security
read article
Spring Security: Protecting Your App from Everyone (Including You!)
read article
What is the CORS ?
read article
Spring Security For Beginners — Part 1
read article
Spring Boot WebSockets: Socket.io + Authentication + Postman
read article
Roadmap to Mastering the Spring Framework 🚀
read article
Spring Security 103: Exploring Default Security Configuration
read article
Spring Security 102: From Setup to Secure Endpoints in Spring Boot
read article
Spring Security 101: Understanding the Basics
read article
Featured ones: