This video here saved me! I understand OAuth2 and OpenId Connect but to have it in the Spring Boot way is a lot harder to figure out. Thank you so much for ythese videos!

@TheDevWorldbySergioLema

5 ай бұрын

I'm so glad it helped you. I've also struggled a lot with this configuration 😅

Exactly what I was looking for! Thank you!

@TheDevWorldbySergioLema

Ай бұрын

So glad it helped you!

Thankyou bro very much. I have seen many videos about oauth2. It is the best

@TheDevWorldbySergioLema

4 ай бұрын

Thank you Alisher!

This is a great tutorial. Thank you ✌👌

@TheDevWorldbySergioLema

5 ай бұрын

Thanks for watching Hamed!

Thanks a lot keep going

@TheDevWorldbySergioLema

6 ай бұрын

Thank you!!

Awesome Content 👍

@TheDevWorldbySergioLema

6 ай бұрын

Thank you Adrian!

great tutorial ! but what if i want to add the option : login with registered infos how i can i integrate it

great content, do you have any video plans about adding a docker deployment for both the frontend and backend?

@TheDevWorldbySergioLema

4 ай бұрын

I have a playlist dedicated to deploy the backend to AWS, using the artifact or a docker image. For the frontend, i deploy it directly to S3, bit.ly/402muTc

Hi Sergio, This is the ONLY complete example I could find to make a standalone frontend work with spring boot security. Thanks a lot for that. One question - what would be the easiest way to disable security in the development environment so we can develop the back-end without logging in?

@TheDevWorldbySergioLema

6 ай бұрын

Thank you so much! The best option is to have Maven profiles and have two Spring Security configurations that load depending on the Maven profile

Thanks alot !

@TheDevWorldbySergioLema

11 күн бұрын

Thanks to you for watching.

hi! is the introspection-uri in your source code a placeholder? what should the actual uri be? Also, how does this integrate with the JWT tutorial that you've done separately? I'm trying to implement both in the same fullstack app but can't seem to interlink the 2! Thank you so much!!

@TheDevWorldbySergioLema

2 ай бұрын

The introspection uri is the real Google API URI, the one you must call to use the authentication requests. What do you want to integrate from the other videos? As this one is already a complete authentication system, where you don't need to handle the password.

Excellent

@TheDevWorldbySergioLema

6 ай бұрын

Thank you!

Could you please make video to demo BFF pattern ( Backend for FrontEnd). BFF is thought more secure than PKCE flow. Reply

Excellent video - thanks so much. How can I get the UserInfo to the client, e.g. if I want to display users name.

@TheDevWorldbySergioLema

2 ай бұрын

You can create a dedicated endpoint to return the user's information

Nice Video

@TheDevWorldbySergioLema

4 ай бұрын

Thanks Sadiul!

how did you learn this much brother. Can you tell me which course you referred?

@TheDevWorldbySergioLema

2 ай бұрын

Practicing, practicing, practicing! There is no course better than create small projects by yourself.

Hi Sergio, I am implementing your code in my application. The access token we get from google expires in 1 hour. Do you know how we can get refresh token and use it for subsequent requests? Thanks in advance

@TheDevWorldbySergioLema

5 ай бұрын

I didn't use it, but you have a Refresh Token method in the Google API, cloud.google.com/java/docs/reference/google-api-client/latest/com.google.api.client.googleapis.auth.oauth2.GoogleRefreshTokenRequest. Let me know if it works for you!

@yaserarshad6920

5 ай бұрын

Thank you@@TheDevWorldbySergioLema

Hi sergio, can you create a tutorial on how to implement an auth filter for your application, how you validate the access token, and lastly how to combine local login and oauth login even with auth filter implementation, thanks

@TheDevWorldbySergioLema

6 ай бұрын

Wow! That's a complicated use case. Let me investigate a little bit. Maybe in several videos

Can you create an in depth tutorial about oauth2 and how to customize it along with react?

@TheDevWorldbySergioLema

2 ай бұрын

Something like this one: kzread.info/dash/bejne/mpqZsdOveNuuf5s.html ?

Hi Sergio, thank you very much. I have a question please: what role does the userDto play in the autherization process since you registered no user ? In fact in my case I want to authenticate with Google my previously registered users Who have name, email, sellerType, address properties in a springboot registration standalone microservice. How can I handle this ? Thank you very much in advance.

@TheDevWorldbySergioLema

10 күн бұрын

This DTO is the user's information that come from Google. You can read some information like the name, email or phone number if the user accepts to share it.

@davidev5238

8 күн бұрын

@@TheDevWorldbySergioLema ok, so it means that the authentication process with Google has nothing to do with the way my users are registered in my backend registration service. If so, then how does Google Knows that the user with given email is authorized to access my app ?

@TheDevWorldbySergioLema

8 күн бұрын

The way I show in this video, I allow all the users of the world with a Google account to log in the application. If you want to restrict the access, there are several ways: * in the Google client application, configure the emails/users which have access * in your application, have a table which lists all the users which have access to your application. Add another filter in Spring Security which checks if the user authenticated with Google is also present in your table.

@davidev5238

7 күн бұрын

Ok, il makes sens to me now. Thank you !

How would I authorize users tho? I mean how do I register (allow) some other email?

@TheDevWorldbySergioLema

2 ай бұрын

With this solution, any user who has a Google account is authorized to access your application.

Does this also work when using Facebook for registration instead of Google?

@TheDevWorldbySergioLema

25 күн бұрын

Yes, it's the same workflow.

hey brother can you make a complete tutorial on spring boot microservices with security that will work with angular as frontend

@TheDevWorldbySergioLema

6 ай бұрын

I've been adding the frontend part (with Angular and React) to my old Spring Boot videos. Now it's time to move to the microservices videos 😉

Hi, can u tell me how to implement logout using your method?

@TheDevWorldbySergioLema

2 ай бұрын

The logout is a little bit more complicated. As it consists in a restful application, there is no way to know if the token was deleted from everywhere or not. Nevertheless, there are some options that I've described in this article: sergiolema.dev/2023/04/03/3-ways-to-invalidate-a-jwt-token-in-the-backend-side/

@vladxd9587

Ай бұрын

@@TheDevWorldbySergioLema thanks

Thanks for the video I would like to implement it in a personal project I have this error please help me NG04002: Cannot match any routes. URL Segment: '%5Bobject%20Object%5D'

@TheDevWorldbySergioLema

Ай бұрын

As described in the following question: stackoverflow.com/questions/72328214/angular-router-outlet-error-cannot-match-any-routes-url-segment it seems that you must respect the OAuth2 URL path. You can't use your custom URL segments

@efoamegnito3546

Ай бұрын

the error occurs after pressing the url that I retrieved from the back-end at the frontend component chapter 40:59

@efoamegnito3546

Ай бұрын

@@TheDevWorldbySergioLema the error is in the redirection to google login form

@TheDevWorldbySergioLema

Ай бұрын

Is the redirect URL configured in Google the same as the one used in your application? Do you use the standard URLs or OAuth2?

@efoamegnito3546

Ай бұрын

@@TheDevWorldbySergioLema yes is Oauth2

How can I do this with OAuth2(Google) and JWT? (Sorry, my reply isn't showing in the comment)

@TheDevWorldbySergioLema

4 ай бұрын

You mean Google returns a JWT with some information (not just a plain token)?

@gustavosoarification

4 ай бұрын

@@TheDevWorldbySergioLema Yes! With some information

@TheDevWorldbySergioLema

4 ай бұрын

I don't know Gustavo. Check this OpenID workflow: developers.google.com/identity/openid-connect/openid-connect I think you can find something useful. Let me know if you figured it out.

@gustavosoarification

4 ай бұрын

@@TheDevWorldbySergioLema ok, thank youu

brother how to set token expired time ?

@TheDevWorldbySergioLema

4 ай бұрын

I don't think you can control the expiration time. It's managed by Google. I saw in the documentation that the default expiration time is 1 hour. If you find more information, let me know.

can we use this without webflux? if yes how?

@TheDevWorldbySergioLema

5 ай бұрын

Yes you can use it without Webflux. But you have to use another library to request the Google API (like Retrofit or OkHttp).

Thanks a lot. facebook login?

@TheDevWorldbySergioLema

6 ай бұрын

The next one 😅

How can I do this with JWT?

@TheDevWorldbySergioLema

4 ай бұрын

Only with a JWT? Without an OAuth2 workflow? I've made video some time ago which allows an Angular application to login into a Spring Boot backend with a JWT: kzread.info/dash/bejne/i4mly5OCmq--aKw.html

@gustavosoarification

4 ай бұрын

@@TheDevWorldbySergioLema noo, OAuth2 (Google) and JWT

@gustavosoarification

4 ай бұрын

​@@TheDevWorldbySergioLema Noo, OAuth2 (Google) and JWT

angular httpclientmodule deprecated 😭😭😢😢😢😢

@TheDevWorldbySergioLema

25 күн бұрын

Oh yes? Those things get deprecated very quickly

How much do you sleep per 24h? Your eyes are so white, mine are so red! Also, can you do the same tutorial but with Graphql instead of REST? Thanks for the very informative tutorial.

@TheDevWorldbySergioLema

8 күн бұрын

😅 At least 6 hours. Graphql is a topic I have in my todo list, but I never found the time to investigate it

@TheDevWorldbySergioLema introspection-uri : what i have to add

@TheDevWorldbySergioLema

Ай бұрын

It's the Google API URL, the same I've used in the video, www.googleapis.com/

@parthv6415

Ай бұрын

​@@TheDevWorldbySergioLema how can i make frontend with only core javascript without any framework or library that's my university's requirements ... guide me brooo

@TheDevWorldbySergioLema

Ай бұрын

I don't use any particular dependency in the frontend. I just use the Angular structure. With plain javascript, you can have a single HTML page with a piece of code in Javascript where you call the backend as I do in the video. The point will be to display different parts of the HTML page depending on the status of the connection (authenticated or not).

Thanks a lot! 🇰🇿❤‍🩹

@TheDevWorldbySergioLema

6 ай бұрын

You're welcome!