Category "spring-security"

Spring Security OAuth 2 - Authorization Server update from 0.1.0 to 0.1.1 / 0.1.2 makes example projects not work

I want to use the new Spring Security Authorization Server to implement OAuth2 for my webservice. At https://www.baeldung.com/spring-security-oauth-auth-server

What are the possibilities with Spring Authorization Server when using it for authentication (and authorization)?

I'm looking to find a tool that will do the authentication (and authorization) part of the project. For the project, I will be using spring boot and java 8. I w

Swagger OpenAPI UI sending 403 response status for POST, PUT and DELETE Requests

Issue : Get request for Swagger UI openAPI is working , whereas other method types giving 403 error. Dependency : <dependency> <groupId>org.

Why get 403 Forbidden while click on login [duplicate]

I am working on Spring MVC project. I use Spring Security for secure the url of my project. While i click on login button login succesfully bu

What Does MapReactiveUserDetailsService Do in Spring Webflux Security Authentication?

I'm trying to implement Spring Security authentication on Spring WebFlux app. I have implemented Spring Security authentication on Spring Web before. When I rea

Redirect to /error instead of /oauth2/authorize with new spring-security-oauth2-autorization-server

I am using react client and new spring-security-oauth2-autorization-server. And I've configured public-client as was suggested in this video . At my local mach

Spring security support multiple authentication types

I need to support 3 way of authentication at the same time in the application: LDAP, Azure AD, Basic. After few hours of googling i found that the best way to d

How to set a custom principal object during or after authentication?

I've changed the way a user is authenticated in my backend. From now on I am receiving JWT tokens from Firebase which are then validated on my Spring Boot serve

KTOR Client and Spring Switchuser

I'm trying to implement a client for spring-security's SwitchUserFilter (server-side). As client I'm using KTOR (with OKHttp inside). SwitchUserFilter requires

No ServletContext set error while Autowiring AuthenticationManager in WsConfigurerAdapter

I have spring boot application which is using 'spring-boot-starter-security', 'spring-ws-security', 'spring-boot-starter-web-services' I am facing below error w

Can't use WebSecurityConfigurerAdapter in a custom spring boot starter

I'm trying to create my own spring boot starter for my custom security configuration (LDAP + JWT) via defining configuration class which extends from WebSecurit

Spring Boot Azure Multiple HttpSecurity

Is it possible to mix two authentication modes? Internal user: Azure ad External user: form authentication So far I have this: @EnableWebSecurity @EnableGlobalM

Keycloak Adapter requires SSL error in AKS

I deployed my spring mvc aplication with tomcat docker image as server in Aks and ingress controller is used for redirection. My application is secured with K

Sessionless form login for Spring OAuth2 authorization server?

I would like to avoid leaving a login session open after an OAuth2 authorization code (spring-authorization-server) has been issued. Currently the flow looks li

Getting 401 Unauthorized Even when the user is authenticated (Spring Security)

I am working on a simple project with 2 defined roles Admin and User,The admin role has authority to view users by thier usernames but when I login as an admin

How to update the password in Spring SecurityContext?

Using Spring Boot 2.6.4. Here is my SecurityConfig class: @Configuration public class SecurityConfig extends WebSecurityConfigurerAdapter { @Autowired Secur

Spring boot WebSecurityConfigurerAdapter basic authentication user password validation issue

I'm writing a simple REST API using Spring Boot and I want to enable basic authentication. Therefore I have used the WebSecurityConfigurerAdapter as shown below

Keycloak and spring security usage

I have used spring security in the past and understand that most of the features of keycloak can be achieved by using spring security ( ldap integration etc ).

spring security authorization error 401 unauthorized

I'm new to spring security and I am trying to create a web application with Jwt Token the problem is that i cant authenticate it always give me 401 error with i

I can't update my webapp to Spring Boot 2.6.0 (2.5.7 works but 2.6.0 doesn't)

As mentioned in the title I can't update my webapp to Spring Boot 2.6.0. I wrote my webapp using Spring Boot 2.5.5 and everything works perfectly. If I update t