An open API service indexing awesome lists of open source software.

https://github.com/darku77/cognitospringbootoauth2client


https://github.com/darku77/cognitospringbootoauth2client

aws cognito java-17 lombok spring-boot spring-boot-oauth2

Last synced: about 2 months ago
JSON representation

Awesome Lists containing this project

README

        

# Security POC APP

## Terminology / Flows / Diagrams

[Diagrams of All The OpenID Connect Flows](https://darutk.medium.com/diagrams-of-all-the-openid-connect-flows-6968e3990660)

[Understanding OAuth 2.0 and OpenID Connect](https://blog.runscope.com/posts/understanding-oauth-2-and-openid-connect)

[A Guide To OAuth 2.0 Grants + Flows](https://alexbilbie.com/guide-to-oauth-2-grants/)

[OAuth 2.0 Simplified](https://www.oauth.com/)

[The Resource Server](https://www.oauth.com/oauth2-servers/the-resource-server/)

[Which OAuth 2.0 Flow Should I Use?](https://auth0.com/docs/get-started/authentication-and-authorization-flow/which-oauth-2-0-flow-should-i-use)

[Authorization Code Grant Type](https://developer.okta.com/blog/2018/04/10/oauth-authorization-code-grant-type)

[OAuth 2.0 Grant Types](https://docs.pivotal.io/p-identity/1-14/grant-types.html)

## Spring Official Docs

[Spring Security Docs](https://docs.spring.io/spring-security/reference/servlet/oauth2/index.html)

[Spring - OAuth2](https://docs.spring.io/spring-security/site/docs/5.2.12.RELEASE/reference/html/oauth2.html)

## Tutorials

[Baeldung - Spring Security 5 – OAuth2 Login - Client](https://www.baeldung.com/spring-security-5-oauth2-login)

[Baeldung - Spring Security 5 - OAuth 2.0 Resource Server](https://www.baeldung.com/spring-security-oauth-resource-server)

[Baeldung - Embedded Keycloak](https://www.baeldung.com/keycloak-embedded-in-spring-boot-app)

## Implementation Libraries

[Certified OpenID Connect Implementations - List 1](https://openid.net/developers/certified/)

[Certified OpenID Connect Implementations - List 2](https://oauth.net/code/)

## StackOverflow

[How to validate an OAuth 2.0 access token for a resource server?](https://stackoverflow.com/questions/12296017/how-to-validate-an-oauth-2-0-access-token-for-a-resource-server)

[How to identify the "client application" at the "resource server" in a OIDC/OAuth2 flow](https://stackoverflow.com/questions/58229695/how-to-identify-the-client-application-at-the-resource-server-in-a-oidc-oaut)

[Difference between grant type: 'client_credentials' and 'password' in Authentication Flow?](https://stackoverflow.com/questions/34842895/difference-between-grant-type-client-credentials-and-grant-type-password-in-auth)