arocketman / spring-oauth2-jpa-example

A simple and basic example to secure REST APIs with authentication using Spring Boot , Security , OAuth2 and JPA.

Hi there 👋

I am a software engineer specializing in designing architectures and writing software to deploy highly available and scalable ML/AI services.

When I have some spare time, I enjoy writing about Software architecture, Artificial Intelligence and Cloud computing.

Currently working at Spotify, previously employed at Vodafone and Unicredit bank.

I love contributing to open source projects, eat delicious food, drink good wine and watch memorable movies.

Getting in touch 📫

Easiest way to get in touch with me is through LinkedIn or Email. Feel free to write me!

---

Latest Articles - technicals 💻

• 29/06/21 - Airflow for non-batch, non-scheduled workloads
• 26/07/20 - Orchestrating machine learning experiments for MLOps using Apache Airflow
• 22/07/20 - Distributed task queue with Python using Celery and FastAPI
• 20/07/20 - The Python logging cheatsheet. Easy and fast way to get logging done in Python
• 11/10/19 - Creating a PIP package on a private repository using setuptools

Latest projects and contributions (sampled) 🛠

• 22/07/20 - Publish a web video series on Apache Airflow - From zero to hero
• 14/04/20 - Add support for NLP/NLU framework SpaCy to machine learning lifecycle platform Mlflow - Github PR
• 25/11/18 - Learn to use Spring OAuth2 - Tutorial and github repo
• 14/12/17 - Easy to use Graph Library with Java and VisFx Github repo with examples
• 25/08/16 - Fully working CPU-Memory MC68000 emulator - Github repo with examples

Latest Articles - misc ⚡

• 16/07/21 - The ‘what if’ technique, a simple tool to become a better software engineer
• 27/04/19 - Leveraging UiPath to find your next home to rent

---

Stats

spring-oauth2-jpa-example's Issues

Getting 404 if send access_token with request.

Hi Arocketman

Thanks for the sample application its of great help. But I am facing a problem. I have successfully generated the token but while send request to protected resource with access token it gives me 404 not found.Can you please look at the issue.

{
"timestamp": 1499576683397,
"status": 404,
"error": "Not Found",
"message": "No message available",
"path": "/private"
}

Urls are not getting authenticated

Hello,

I have followed your video on youtube "Secure REST API with authentication using Spring Boot , Security , OAuth2 and JPA."

I am getting access_tokens for grant_type =password and client_credentials.
But the thing is, my REST api urls are not getting authenticated. i.e. they are working without access_token
PFB:
public void configure(HttpSecurity http) throws Exception { http.authorizeRequests().antMatchers("/").permitAll() .antMatchers(SecurityRestEndPoints.SECURITY_BASE_V1 + "/**").authenticated(); }

Kindly, let me know what should I change to make it workable.

Thanks,
Siddharth

/private RequestMapping isnt configured in HomeController

As mentioned in the Video at :
https://youtu.be/0pD7YeTAUkk?t=2m41s

There should be a resource that is private and requires auth.

Entity user does not have a default constructor

Add video link in the README

I found this repo through Google and I wasn't aware that there is a video for it (found the link in a closed issue).
I think it would be nice to add the link to README, so people who find it like me will know about it.

How to migrate to Spring Boot 2.0.0

I'm novice using Spring Boot.
Your sample project works on Spring Boot 1.5.x
But when trying running on 2.0.0 throws this:

Description:

Field authenticationManager in com.mh.sgmun.configuration.AuthorizationServerConfiguration required a bean of type 'org.springframework.security.authentication.AuthenticationManager' that could not be found.

Action:

Consider defining a bean of type 'org.springframework.security.authentication.AuthenticationManager' in your configuration.

Writing Test cases

Hello,

I have seen that the project gives a good example, but I do not see test cases written.
I have written a code for test cases.

I have written a test case for the home page, it is working fine.
but I face an issue that there is an issue related to function obtain tokens.

It returns status code 401 although it should return status code 200 Ok

`

   private String obtainAccessToken(String username, String password) throws Exception {     
   MultiValueMap<String, String> params = new LinkedMultiValueMap<>();
    params.add("grant_type", "password");
   params.add("client_id", "my-trusted-client");
    params.add("username", "user");
    params.add("password", "user");

    ResultActions result 
      = mockMvcURLAuthenication.perform(post("/oauth/token")
      .params(params)
      .with(httpBasic("my-trusted-client",passwordEncoder.encode("secret")))
      .accept("application/json;charset=UTF-8"))
      .andExpect(status().isOk());
      
    String resultString = result.andReturn().getResponse().getContentAsString();
 
    JacksonJsonParser jsonParser = new JacksonJsonParser();
    return jsonParser.parseMap(resultString).get("access_token").toString();
}

`
Thanks

Please mentioned steps to execute the code

Please mentioned steps to execute the code

I can simply call the curl -i http://localhost:8080/
so where is the security ?

Map method in CustomUserDetailsService class

.map(u -> new org.springframework.security.core.userdetails.User isn't working can you check it's correction?