Secured REST Microservices with Spring Cloud
summary
Covers a concrete Spring-based stack for OAuth2 SSO: Spring Cloud Security + Spring Security OAuth2, UAA authorization server, Zuul API gateway and JWTs as access tokens. Shows how authorization server signs JWTs and resource services download the JWT public key cached at boot to avoid per-request validation, explains grant choices (authorization_code, implicit, password, client_credentials for m2m, refresh), and discusses short-lived access vs refresh tokens, logout implications and basic config snippets—practical if building Java microservices.
AI-written summary · about
chapters (21)
- 0:00Introduction
- 1:18Goals
- 3:58Monolith vs Microservice
- 8:03API Gateway Security
- 9:24HTTP Security
- 10:04Central Database
- 10:39Session Management
- 11:59API Tokens
- 13:28Uniform Solution
- 14:12OAuth
- 17:15Tokens
- 17:57JSON Web Token
- 20:10Grant Types
- 26:44ID Connect
- 28:03Spring Cloud Security
- 29:36Authorization Server
- 32:32Resource Service
- 34:46SSO
- 35:53Goals Concerns
- 41:17Questions
- 48:22Access Token
related talks
01h 30mSecuring Microservices with Spring Cloud Security
01h 31mSecurity for Microservices with Spring and OAuth2
50mArchitectural Patterns for Spring Security You Wish Your Tech Lead Knew
51mSecuring applications with OAuth2 and OpenID Connect using SpringSecurit
01h 26mSecuring Rest-ful Web Services with OAuth2
46mImplementing Microservices Security Patterns & Protocols with Spring Security
31mSecure-by-Default Spring Apps: Zero Trust, OAuth2, and Runtime Policies
01h 02mGetting Started with Spring Authorization Server