artemmartynenko / spring-cloud-gateway-oauth2-sso-sample-application

Sample apllication for Spring Cloud Gateway as microservices API Gateway with OAuth2 Single Sign On

Spring Cloud Gateway OAuth2 SSO Sample Application

It`s a sample application which how to achieve SSO for your microservices with usage of new Spring Cloud Gateway as your API gateway and also with OAuth2 authorization protocol and JWT tokens.

Sample dependencies

• Spring Boot 2.1
• Spring Cloud Gateway 2.1.M1
• Spring Security 5.1.1

The main idea of this sample is to show how you can achieve functionality described in references below (where Zuul is used as your API Gateway) but with usage of new Spring Cloud Gateway provided with Spring Boot 2 and also with reactive approach (a new feature of Spring 5).

References:

• spring OAuth2 SSO tutorial
• sso-spring-security-oauth2
• jwt tokens example
• microservices-security-with-oauth2

spring-cloud-gateway-oauth2-sso-sample-application's Issues

oauth2.0-2

I look forward to your integration of oauth2.0 with spring gateway.

oauth2.0

Hello, can I build an oauth2.0 server to start and access locally? Thank you

LoadBalanced

Can implement loadbalanced for this application?

SSO support with Web Client

Hi,

How to fit this solution into the architecture with separate web client in front of cloud gateway?

This issue had been discussed on stackoverflow as below:

https://stackoverflow.com/questions/54332236/implementing-authentication-and-authorization-using-zuul-proxy-oauth2-on-rest-m

Can't start up

Hello, I downloaded your example, but the example needs to have a certificate authority to start, can you disclose the code of the certificate center? Thank you!
I tried to write it myself, but I couldn't start it.

About jwt-key-uri

I'm trying to play this logic with google oauth2 provider and I have given the following configuration.
spring: security: oauth2: client: registration: google: client-id: <client-id> client-secret: <client-secret> provider: example: jwt-key-uri: https://www.googleapis.com/oauth2/v3/certs
Unfortunately it is not working due to jwt-key-uri property value. May I know what this property does and what is the right value for google provider?