edesdan / springboot-auth-jwt

Implementing JWT Authentication on Spring Boot APIs

Developing and Securing RESTful APIs with Spring Boot

This sample application shows how to develop a Restful api with SpringBoot and secure it using Spring Security via JSON Web Tokens.

How To Setup The Application And Run It

• Make sure you have gradle installed on your system and an IDE. If you don't have an IDE don't worry you can still follow with a text editor and the terminal.
• Make sure you have Java 11 installed on your system. Get it here
• Clone the repository using the command https://github.com/edesdan/springboot-auth-jwt.git
• Run a mongo db instance on localhost (you can use docker...)
• Run gradle bootrun to build and run the project or run the project from your ide(make sure you build it before running)

How it works

# issues a GET request to retrieve tasks with no JWT
# HTTP 403 Forbidden status is expected
curl http://localhost:8080/tasks

# registers a new user
curl -H "Content-Type: application/json" -X POST -d '{
    "username": "admin",
    "password": "password"
}' http://localhost:8080/users/registration

# logs into the application (JWT is generated)
curl -i -H "Content-Type: application/json" -X POST -d '{
    "username": "admin",
    "password": "password"
}' http://localhost:8080/login

# issue a POST request, passing the JWT, to create a task
# remember to replace xxx.yyy.zzz with the JWT retrieved above
curl -H "Content-Type: application/json" \
-H "Authorization: Bearer xxx.yyy.zzz" \
-X POST -d '{
    "description": "Buy watermelon"
}'  http://localhost:8080/tasks

# issue a new GET request, passing the JWT
# remember to replace xxx.yyy.zzz with the JWT retrieved above
curl -H "Authorization: Bearer xxx.yyy.zzz" http://localhost:8080/tasks