Securing Rest-ful Web Services with OAuth2
summary
Argues OAuth2 fits composed collections of lightweight HTTP/JSON services and shows a working Cloud Foundry authorization server: the UAA authorization server implemented with Spring Security OAuth2 and deployed on Tomcat. Demonstrates client registration, scopes, implicit and client‑credentials grants, curl examples, and opaque vs JWT tokens (tokens are JWTs signed with asymmetric keys so resource servers can validate locally). Provides GitHub samples and a running demo; the system is production‑ready and used by Cloud Foundry.
AI-written summary · about
chapters (18)
- 0:00Introduction
- 2:26Agenda
- 3:27Setting the Story
- 4:39Lightweight Services
- 6:56Security Requirements
- 8:29HTTP Basic Authentication
- 13:21Limitations of Basic Authentication
- 15:09Rolebased Authentication
- 16:53Key Management
- 18:00Nsquared
- 18:25The Good
- 21:51Vocabulary
- 30:21Access Tokens
- 35:06Ask Questions
- 36:32Cloud Foundry
- 41:21Client Applications
- 42:51Client Financial Tokens
- 44:27Spring Security JWT
related talks
56mSecured REST Microservices with Spring Cloud
01h 31mSecurity for Microservices with Spring and OAuth2
01h 30mSecuring Microservices with Spring Cloud Security
50mOAuth2 protocol
01h 02mGetting Started with Spring Authorization Server
50mArchitectural Patterns for Spring Security You Wish Your Tech Lead Knew
51mEnterprise Security with Spring Authorization Server 1.0
01h 33mA How to Guide to Security in the PAAS Cloud