Spring Security is a highly extensible and customizable framework. Its flexibility stems from being designed with object-oriented principles and best practices, ensuring it is open for extension while remaining closed for direct modification. In the previous chapter, we explored a key extension feature of Spring Security—the ability to integrate various authentication providers. This chapter focuses on one of the most widely used authorization frameworks, Open Authorization 2.0 (OAuth 2.0). It will guide you through creating a secure login application using Spring Boot, Spring Web, and the OAuth2 client to connect with Google as provider.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Securing OAuth2 Authentication Flow

  • Massimo Nardone

摘要

Spring Security is a highly extensible and customizable framework. Its flexibility stems from being designed with object-oriented principles and best practices, ensuring it is open for extension while remaining closed for direct modification. In the previous chapter, we explored a key extension feature of Spring Security—the ability to integrate various authentication providers. This chapter focuses on one of the most widely used authorization frameworks, Open Authorization 2.0 (OAuth 2.0). It will guide you through creating a secure login application using Spring Boot, Spring Web, and the OAuth2 client to connect with Google as provider.