https://github.com/josdem/spring-web-resource-server

Implements Oauth2 authorization code and client credentials flow
https://github.com/josdem/spring-web-resource-server

gradle java oauth2 spring-boot

Last synced: about 18 hours ago
JSON representation

Implements Oauth2 authorization code and client credentials flow

• Host: GitHub
• URL: https://github.com/josdem/spring-web-resource-server
• Owner: josdem
• Created: 2023-09-28T11:21:59.000Z (about 1 year ago)
• Default Branch: main
• Last Pushed: 2024-03-22T18:00:13.000Z (8 months ago)
• Last Synced: 2024-05-02T01:34:52.295Z (7 months ago)
• Topics: gradle, java, oauth2, spring-boot
• Language: Java
• Homepage:
• Size: 117 KB
• Stars: 0
• Watchers: 2
• Forks: 1
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        
Spring Boot Resource Server

----------------------------

This project shows how to implement [Oauth 2.0 Resource Server](https://docs.spring.io/spring-security/reference/servlet/oauth2/resource-server/index.html) with [Spring Boot Security](https://docs.spring.io/spring-security/reference/index.html) project

#### To run the project

```bash

gradle bootRun

```

#### To run the project in production

```bash

gradle bootRun -Dspring.profiles.active=prod

```

**Note:** This project uses this [Authorization Server](https://github.com/josdem/spring-boot-authorization-server) to grant access tokens, so you need to run that project in your local computer in order to execute this project.

#### To issue a token

```bash

curl -X POST http://localhost:9000/oauth2/token -u "client:secret" -d "grant_type=client_credentials" -d "scope=write"

```

And you should get a response like

```bash

{"access_token":"eyJraWQiOiI1YTMwN2I1My03NDM2LTQ4NWUtOTVkZC1mZDkxZjg1YTZmNDkiLCJhbGciOiJSUzI1NiJ9.eyJzdWIiOiJjbGllbnQiLCJhdWQiOiJjbGllbnQiLCJuYmYiOjE2OTM2MDA1MDUsInNjb3BlIjpbIndyaXRlIl0sImlzcyI6Imh0dHA6Ly9sb2NhbGhvc3Q6OTAwMC8iLCJleHAiOjE2OTM2MDA4MDUsImlhdCI6MTY5MzYwMDUwNX0.UsEfCzgaFaix2vxcw4sqobs2ChkvCI-DP1vP7t9uHQXEEhgyhOm6gWEci6PdZa0yoqUW6Yg25YZ03m5rzcolL6CADWSP2tJ4WvPNU4wvRosNTKU94j3Scbbp1M8SBpFQsOdxApMN7W11EULeafIBad_XiuQvrEJHbxowdyDimVSPZQwlh1mamszuU3hVBnhJF_0YceBDtttSfkIvreqq6d7BuPVCJWOjdHwXTGRpi5V8AUqzoJIiAR8-3Z4SrxKJUah5GOgOm4OqZyTO31paE50wphKPq9VT0_cWRM36B7cve6_hXG5qhEaYLu3G-vzk-mBQgECkk-YqEEy_dCmi5Q","scope":"write","token_type":"Bearer","expires_in":299}

```

Then, export the access token from the response:

```bash

export TOKEN=...

```

Then issue the following request to do a GET:

```bash

curl -H "Authorization: Bearer $TOKEN" http://localhost:8081/message

```

Then issue the following request to do a POST:

```bash

curl -H "Content-Type: application/json" -H "Authorization: Bearer $TOKEN" -d "Hello World" http://localhost:8081/message

```

Then do a GET request to see your client ID:

```bash

curl -H "Authorization: Bearer $TOKEN" http://localhost:8081/

```

To run tests cases:

```bash

export CLIENT=client

export SECRET=secret

gradle test

```

#### Read this as reference

* http://josdem.io/techtalk/spring/spring_webflux_security/