The new Spring Security
summary
Live demo builds an authorization server with the new Spring Security Authorization Server (v1 M2) on Spring Boot 3, implements the authorization code grant end-to-end, uses an in-memory UserDetails and RegisteredClientRepository, exposes an OpenID Connect well-known JWKS endpoint and a JWK RSA 2048 key pair for signing. The client exchanges the code for access and ID tokens (refresh tokens configurable), startup is ~2.8s and a native build drops it to ~1.3s, and the demo successfully returns JWTs.
AI-written summary · about
chapters (7)
- 0:00Introduction and context
- 10:37Project setup
- 17:25Configuring security
- 23:51Key source implementation
- 29:13Live demo and testing
- 32:40Native compilation
- 41:30Q&A and conclusion
related talks
45mImplementing an OAuth 2 authorization server with Spring Security - the new way!
51mEnterprise Security with Spring Authorization Server 1.0
01h 02mGetting Started with Spring Authorization Server
51mEverything new in Spring Security 6 baked with a Spring Boot 3 recipe
46mEverything new in Spring Security 6 baked with a Spring Boot3 recipe
43mOAuth2, OpenID: live-coding SSO, from first principles
43mIdentity crisis: bending Spring Security to your advanced use-cases
48mModern Authentication Demystified: A Deep Dive into Spring Security’s Latest Innovations