Securing Spring Applications with JWTs

Name: Securing Spring Applications with JWTs
Rating: 4.4 (25 reviews)

Spring Security, and how to Integrate Jwts with it.

Created byIsaiah Osarobo

Last updated 7/2024

English

What you'll learn

Understand how to set up a spring boot project
Learn how to implement spring security in sprng based apps
Completely understand how to generate jwt tokens for user authentication and authorization
Learn how to configure Role bases access in a spring boot application

Course content

1 section • 7 lectures • 1h 56m total length

Introduction and Overview11:14
Learn how to secure a Spring Boot application with JWT using Spring Security, covering authentication and authorization, with a hands-on setup and testing via Postman.
Explanation Of The Spring Security Work flow2:30
Explore the Spring Security workflow from request interception by an authentication filter to user verification via the authentication manager and provider, using the user details service and an in-memory database.
Explaining what a Jwts are and how they are represented6:18
Explain what JSON web tokens are and how they are represented: a three-part, base64 URL-encoded token with header, payload (claims), and signature, preserving integrity and authenticity.
Defining User Entity For Project11:17
Define the user entity and repository, use uuid as id, create a role enum with admin and user, implement user details to expose authorities, and plan JWT service and filter.
Creating a Jwt Service Class14:30
Set up a spring jwt service by adding jwt dependency to pom.xml, inject secret from application.properties, generate signing key, build tokens with subject and expiry, and validate them.
Creating a JwtAuthFilterClass and Overriding Spring Security Default Config1:02:17
Learn how to implement a JWT authentication filter in Spring Security, override the default security config, define authentication beans, and secure register and auth endpoints with role-based access.
Final Update for the latest version of the Jjwt dependency8:27
Update your Spring security JWT service for jjwt 0.12.5 by replacing deprecated builder and signing key usage with verify with, using payload and secret key, and updating pom.xml.

Requirements

Experience in setting up a spring boot applicationn, Git and github

Description

Hello welcome to the spring security with jwt free master course, my name is Isaiah Osarobo and I'm the instructor of this course, for you to get started with this course you should already have a prior knowledge of how to develop a spring boot application and how to make use of github, However if you don't have any prior knowledge of how to create a simple spring boot application don't worry, you can checkout out my other free course on how to create a new spring boot application. In this complete spring security video tutorial we'll learn how to implement proper authorization and authentication logic for our springboot applications using spring security and Jwts following the updated standard. The major key concept we take a look at is how to provide proper configuration for authorization and authentication in a spring boot application. The complete project can be found in the github repository iocods/iocode-jwt-spring-security (Note I can't provide the full link due to Udemy restrictions). To get started with the tutorial and project you'll either have to create a simple spring application that exposes an endpoint or you clone the start branch of the above github repository using the command below: "git clone -b start --single-branch iocods/iocode-jwt-spring-security.git" Note: use the full link of github before the repository part.

Who this course is for:

Beginner spring boot developers who wants to understand how to integrate jwt with spring security.