fdlessard / spring-boot-oauth2-sso-apps

spring-boot-oauth2-sso-apps example

spring-boot-oauth2-sso-apps

References

• https://docs.spring.io/spring-security/site/docs/current/reference/html/oauth2.html

• https://docs.spring.io/spring-security/site/docs/current/reference/html5/

• https://developer.okta.com/blog/2019/05/15/spring-boot-login-options

• https://developer.okta.com/docs/guides/implement-oauth-for-okta/request-access-token/

• https://developer.github.com/apps/building-oauth-apps/authorizing-oauth-apps/

• https://www.youtube.com/watch?v=1N-xwmoN83w

• https://docs.spring.io/spring-security-oauth2-boot/docs/current/reference/html/boot-features-security-oauth2-resource-server.html

• spring-projects/spring-security#6342

• https://liupeirong.github.io/postmanAzureFunctions/

• https://medium.com/agilix/getting-started-with-windows-azure-ad-authentication-using-postman-e37a185b642d

• https://github.com/AzureAD/azure-activedirectory-library-for-java

• https://github.com/AzureAD/microsoft-authentication-library-for-java

• https://github.com/microsoft/azure-spring-boot

• https://docs.microsoft.com/en-us/azure/active-directory/develop/sample-v2-code

• https://www.youtube.com/watch?v=JnYIsvJY7gM&t=3350s

• https://www.youtube.com/watch?v=WbnuwpSBXPs&list=PLAdzTan_eSPRlQ8t4TU5c-AB4SHV939M6&index=24&t=77s

• https://www.youtube.com/watch?v=ke13w8nab-k&t=747s

• https://www.youtube.com/watch?v=YcAufUtfm44&t=71s

• https://github.com/jgrandja/oauth2-protocol-patterns We were using the "s1p-2019" branch

• https://www.youtube.com/watch?v=nrmQH5SqraA&t=1298s

Azure Nounce Issue and other issues

• https://medium.com/@abhinavsonkar/making-azure-ad-oidc-compliant-5734b70c43ff
• https://www.voitanos.io/blog/validating-azure-ad-generated-oauth-tokens
• AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#609

client credentials

• https://github.com/AzureAD/microsoft-authentication-library-for-dotnet/wiki/Client-credential-flows

Azure iss issue

• AzureAD/microsoft-authentication-library-for-js#560

Learning videos

• https://www.youtube.com/watch?v=EBdm683HdAo&list=PLAdzTan_eSPRlQ8t4TU5c-AB4SHV939M6&index=159&t=0s
• https://www.youtube.com/watch?v=RRMO4oNptoQ&list=PLAdzTan_eSPRlQ8t4TU5c-AB4SHV939M6&index=157&t=0s
• https://www.youtube.com/watch?v=ke13w8nab-k&list=PLAdzTan_eSPRlQ8t4TU5c-AB4SHV939M6&index=163&t=444s

OAuth2 Doc

• https://www.oauth.com/

• note that okta implementation of authorization uses the client secret

• https://support.okta.com/help/s/question/0D51Y00005xyT6j/spa-oauth-flow-recommendation-and-token-refresh

• https://developer.okta.com/blog/2020/01/23/pkce-oauth2-spring-boot