Configuring and Extending Spring Authorization Server
Imagine you can download and minimally configure an OAuth2 Authorization Server with secure defaults in less than 10 minutes, easily customize the configuration, and extend the default server capabilities and provide custom features to conform to the security requirements defined by your organization. If that sounds good, you need to try Spring Authorization Server. It delivers a very flexible configuration model for customizing the defaults and provides well-defined extension points for plugging in custom features. This talk demonstrates the configuration and extension possibilities that Spring Authorization Server provides. We start at ground zero with the minimal required configuration. Then we customize the defaults by demonstrating how to fine-tune the configuration for the core components and protocol endpoints. Finally, we demonstrate how to extend the server capabilities and provide a custom authorization grant type that supports custom parameters and access token type.
Recommended
More Related Content
More from VMware Tanzu
More from VMware Tanzu(20)
Recently uploaded
Recently uploaded(20)
Configuring and Extending Spring Authorization Server
- 1. │©2022 VMware, Inc. Configuring and Extending Spring Authorization Server Joe Grandja Steve Riesenberg Laurentiu Spilca
- 2. │©2022 VMware, Inc. Extending a New Authorization Grant Type RFC 7523 - JSON Web Token (JWT) Profile for Authorization Grants
- 3. AuthenticationConverter AuthenticationProvider AuthenticationManager AuthenticationFailureHandler AuthenticationSuccessHandler << Request Processing >> << Response Processing >> OAuth2 Endpoint << Filter >> Protocol Request Flow
- 4. JwtBearerGrant AuthenticationConverter JwtBearerGrant AuthenticationProvider AuthenticationManager AuthenticationFailureHandler AuthenticationSuccessHandler << Request Processing >> << Response Processing >> OAuth2TokenEndpointFilter << Filter >> Access Token Request Flow
- 5. Thank you! ● Spring Authorization Server ○ https://github.com/spring-projects/spring-authorization-server ● Demo branch ○ https://github.com/sjohnr/spring-authorization-server/tree/springone-2023 Joe Grandja @joe_grandja Steve Riesenberg @sjohnr Laurentiu Spilca @laurspilca