Category "spring-security"

How to implement multi-tenancy in new Spring Authorization server

Link for Authorization server: https://github.com/spring-projects/spring-authorization-server This project pretty much has everything in terms of OAuth and Iden

In java spring, how to best "change secret in production"?

I am currently creating a Java Spring application that works with the spring security JWT. Everywhere I look and read about the "secret string", it says should

Spring Boot Azure AD custom roles

I have this vanilla spring boot/azure/starter app, connecting to our internal azure service. https://docs.microsoft.com/de-de/azure/developer/java/spring-framew

How to fix 'java.lang.NoClassDefFoundError: org/springframework/validation/annotation/ValidationAnnotationUtils' In Spring MVC

I have Spring MVC application with JSP and the server is Tomcat. when I run this web application. Tomcat log as follows. 24-Feb-2022 16:13:16.054 SEVERE [http-n

No matter how much I read Spring Security is an alien concept. Any pointers?

I have the following requirement that I need to implement on a project, but not matter how many books or articles I read on spring security I cannot figure out

Tomcat static content path security with Spring

I'm trying to setup static content serving on my Tomcat 9 server So I specified it inside server.xml <Host name="${serverhost}" appBase="webapps" unpackWARs=

Jwt + Spring Interceptor + Custom Annotation versus Spring Security [closed]

Currently, we have a spring boot REST application connecting to a mysql database in which we have a table named "User" with several fields. Am

Spring Security Login Form always loads first

I am working on a web application and I want to implement spring security. I want anyone to be able to see the home page at least. I have attempted to map this

Why one request triggered CORS policy but the other not?

I use the same request func to yield call two api on the server. Model func code: const pomdata = yield call(pullInfo1, payload) const data = yield call(pullinf

How to replace an user's authentication 'http.formLogin()' with a form that is on another frontend server?

Inside a class that extends WebSecurityConfigurerAdapter, I have this authencitation method. I store my users inside an Active Directory. @Override publ

How to Retrieve OAuth2AuthorizedClient in a request when using WebFlux

I have a back-end(Springboot) application that is connected to Azure AD and a front-end application that accesses it. In the front-end, I am requiring the user

Which mechanism to use for CSRF token handling with spring security

I am new to web security and implementation of same using spring-security. One important concept is prevention from CSRF using CSRF token. Spring security has p

Spring Security OAuth 2 - Authorization Server update from 0.1.0 to 0.1.1 / 0.1.2 makes example projects not work

I want to use the new Spring Security Authorization Server to implement OAuth2 for my webservice. At https://www.baeldung.com/spring-security-oauth-auth-server

What are the possibilities with Spring Authorization Server when using it for authentication (and authorization)?

I'm looking to find a tool that will do the authentication (and authorization) part of the project. For the project, I will be using spring boot and java 8. I w

Swagger OpenAPI UI sending 403 response status for POST, PUT and DELETE Requests

Issue : Get request for Swagger UI openAPI is working , whereas other method types giving 403 error. Dependency : <dependency> <groupId>org.

Why get 403 Forbidden while click on login [duplicate]

I am working on Spring MVC project. I use Spring Security for secure the url of my project. While i click on login button login succesfully bu

What Does MapReactiveUserDetailsService Do in Spring Webflux Security Authentication?

I'm trying to implement Spring Security authentication on Spring WebFlux app. I have implemented Spring Security authentication on Spring Web before. When I rea

Redirect to /error instead of /oauth2/authorize with new spring-security-oauth2-autorization-server

I am using react client and new spring-security-oauth2-autorization-server. And I've configured public-client as was suggested in this video . At my local mach

Spring security support multiple authentication types

I need to support 3 way of authentication at the same time in the application: LDAP, Azure AD, Basic. After few hours of googling i found that the best way to d

How to set a custom principal object during or after authentication?

I've changed the way a user is authenticated in my backend. From now on I am receiving JWT tokens from Firebase which are then validated on my Spring Boot serve