Implementing Microservices Security Patterns & Protocols with Spring Security
summary
A runnable sample implements a UI gateway plus three microservices secured with Spring Security 5/5.1/5.2 and an authorization server (UAA), showing OpenID Connect + OAuth2 flows, JWKS discovery for JWT verification, and a WebClient exchange filter that injects bearer tokens. The demo uses an authorization code client for user-facing calls and a client credentials client for system-to-system calls, produces expected 401 then successful calls and a scope-based 403, and highlights token exchange vs token relay tradeoffs.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 6:32Architecture
- 8:28Demo
- 9:39Open ID Authentication
- 15:54Open ID Connected Discovery
- 18:24Resource Server Configuration
- 20:34Open Academics Discovery
- 23:39OAuth Client
- 28:29Web Client
- 38:54Finegrained Authorization
related talks
50mArchitectural Patterns for Spring Security You Wish Your Tech Lead Knew
01h 30mSecuring Microservices with Spring Cloud Security
01h 31mSecurity for Microservices with Spring and OAuth2
51mSecuring applications with OAuth2 and OpenID Connect using SpringSecurit
56mSecured REST Microservices with Spring Cloud
43mSecuring the Service to Service Call Chain Patterns and Protocols
45mSecurity in a Microservices Architecture?
33mSpring Security Patterns