Book Image

Spring 5.0 Projects

By : Nilang Patel
Book Image

Spring 5.0 Projects

By: Nilang Patel

Overview of this book

Spring makes it easy to create RESTful applications, merge with social services, communicate with modern databases, secure your system, and make your code modular and easy to test. With the arrival of Spring Boot, developers can really focus on the code and deliver great value, with minimal contour. This book will show you how to build various projects in Spring 5.0, using its features and third party tools. We'll start by creating a web application using Spring MVC, Spring Data, the World Bank API for some statistics on different countries, and MySQL database. Moving ahead, you'll build a RESTful web services application using Spring WebFlux framework. You'll be then taken through creating a Spring Boot-based simple blog management system, which uses Elasticsearch as the data store. Then, you'll use Spring Security with the LDAP libraries for authenticating users and create a central authentication and authorization server using OAuth 2 protocol. Further, you'll understand how to create Spring Boot-based monolithic application using JHipster. Toward the end, we'll create an online book store with microservice architecture using Spring Cloud and Net?ix OSS components, and a task management system using Spring and Kotlin. By the end of the book, you'll be able to create coherent and ?exible real-time web applications using Spring Framework.
Table of Contents (13 chapters)
Title Page
About Packt
Contributors
Preface
Index

Spring Security integration with OAuth


Having seen the basic fundamentals of what OAuth 2.0 is and how it works, we will now look at the integration of OAuth in Spring Security. We will continue to work with the same application that we created for LDAP, and will make the necessary changes for OAuth integration.

For the OAuth demonstration, we will use readily available authorization providers. Spring Security supports Google, Facebook, Okta, and GitHub providers out of the box. Choosing one of them would only require certain configurations, and things would start to work. We will select Google as an authorization server (provider) to build OAuth for our application. The grant type that we will use in this integration is authorization code.

Every authorization provider supports some sort of mechanism that enables the clients to establish a connection with the service. This process is known as application registration

Application registration

Let's register (or create) an application at Google...