Enterprise Security with Spring Authorization Server 1.0
summary
Shows how to build a customizable OAuth Authorization Server with Spring Authorization Server 1.0 and Spring Boot, including a GitHub repo and slides. Demonstrates using bcrypt work factor 14 so password validation runs near one second, swapping username/password for JWTs, resource servers auto-discovering keys via issuer URI and the JWKS endpoint, moving registered clients and consents to JDBC, and a REST endpoint that creates new keys so the demo achieves zero-downtime key rotation across instances.
AI-written summary Β· about
chapters (13)
- 0:00Introduction
- 0:28Agenda
- 1:20Basic Authentication
- 4:43Password History
- 7:49Password Optimization
- 16:02Demo
- 21:42Security Filter Chain
- 27:52Custom Consent Page
- 31:32Consistency
- 35:32JWT Source
- 39:32Endpoints
- 42:02Questions
- 43:42Session Management
related talks
01h 02mGetting Started with Spring Authorization Server
45mImplementing an OAuth 2 authorization server with Spring Security - the new way!
48mThe new Spring Security
01h 31mSecurity for Microservices with Spring and OAuth2
56mSecured REST Microservices with Spring Cloud
31mSecure-by-Default Spring Apps: Zero Trust, OAuth2, and Runtime Policies
54mHow to secure your Spring Apps with Keycloak
33mSpring Security Patterns