README

Microservices Authentication & Authorization With Spring Security [Workshop]

This contains both, theory parts on all important concepts, and hands-on practice labs.

Table of Contents

• Workshop Tutorial

• Requirements and Setup

• Hands-On Workshop

  • Intro Labs

    • Demo: Auth Code Flow in Action

  • Hands-On Labs

    • Lab 1: Resource Server

    • Lab 2: Testing the Resource Server

    • Lab 3: Call another Microservice

• Slides of workshop at Spring I/O 2022

• Feedback

• License

Workshop Tutorial

To follow the hands-on workshop please open the workshop tutorial.

Requirements and Setup

For the hands-on workshop you will extend a provided sample application along with guided tutorials.

You will need a customized version of the Spring Authorization Server that you can get from https://github.com/andifalk/custom-spring-authorization-server

The components you will build (and use) look like this:

Architecture

Please check out the complete documentation for the sample application before starting with the first hands-on lab.

All the code currently is build using

• Spring Boot 2.7.x Release

• Spring Framework 5.3.x Release

• Spring Security 5.7.x Release

All code is verified against the currently supported long-term versions 11 and 17 of Java.

To check system requirements and setup for this workshop please follow the setup guide.

Hands-On Workshop

Intro Labs

• Demo: Authorization Code Grant Flow in Action

Hands-On Labs

• Lab 1: Resource Server

• Lab 2: Testing the Resource Server

• Lab 3: Call another Microservice

Feedback

Any feedback on this hands-on workshop is highly appreciated.

Just send an email to andreas.falk(at)novatec-gmbh.de or contact me via Twitter (@andifalk).

License

Apache 2.0 licensed