Servers, OAuth Client, SecurityFilterChain and More with Spring Security
summary
Covers adding authentication and authorization to an internal system using Spring Security and OAuth. Explains differences between AuthenticationProvider and AuthenticationManager, the role of UserDetailsService, how to centralize permission checks via SecurityFilterChain conventions, and how integrating Okta revealed differences between the organization’s authorization server and the default server.
AI-written summary · about
chapters (11)
- 0:00Introduction
- 3:57Auth basics in Spring Security
- 10:20Security Filter Chain
- 15:39OAuth2 Okta config issues
- 21:56Role-based access with PCA
- 27:33Authentication Manager in practice
- 35:01Authorization Code Flow with PKCE
- 41:03OAuth2 server setup in Spring
- 45:15Context sharing between servers
- 47:18Token storage and refresh handling
- 49:26Q&A
related talks
52mArchitecture Deep Dive in Spring Security
54mSpring Security Patterns
46mEverything new in Spring Security 6 baked with a Spring Boot3 recipe
01h 02mGetting Started with Spring Authorization Server
56mSecured REST Microservices with Spring Cloud
54mHow to secure your Spring apps with Keycloak
02h 38mAuthorization with Spring Security: Permissions, Roles and More
51mEverything new in Spring Security 6 baked with a Spring Boot 3 recipe