Implement JWT Authentication with Java & SpringBoot in 2023

UPDATED-2023 - Learn to secure your SpringBoot based RESTful API's using Role Based JWT Authentication & Authorization

What you'll learn:

• You will learn basics of security like Authentication and Authorization
• You will learn everything about JWT(JSON Web Token)
• You will learn to Implement JWT with SpringBoot and Spring Security
• You will learn to Implement Role Based Authentication & Authorization with JWT & Spring Security
• You will learn to setup a SpringBoot project from scratch
• You will learn to create API's which will talk to Database using Spring Data JPA
• You will learn to protect your API's based on user role
• You will get the complete source code

This course has been updated in 2023 as per new Spring Security Features and JWT Specification to implement Role Based Authentication & Authorization of any SpringBoot based Application.

JWT(Json web token) is a standard for securing API's in a Microservices architecture, using this standard we can secure API's built in any technology like Nodejs, Python, .NET etc but in this course we will building API's using Java and SpringBoot and than we will be securing them using JWT and Spring security, we will also use all the industry best practices and standards along the way.

We will start with learning concepts like:

• What is Authentication

• What is Authorization

• Importance of securing RESTful API's

• What is JWT(Json Web Token)

• Various components and terminology associated with JWT

• Workflow and a diagramatic use case of using JWT

Than we will move on to the actual handson and implementation of JWT in our Springboot project by following below steps:

• Create springboot project from scratch

• Adding required maven dependencies

• Setup project in Github and follow continous integration process

• Setting up database and establishing connection

• Create our Hibernate entity classes

• Create our controller class

• Create the first API

• Start configuring JWT and Spring security

• Create security related classes like configuartion, filters, service

• Making the secret and expiration time configurable

• Configuring the allowed and not allowed endpoints

• Creating user registration and login endpoints

• Creating Role based classes

• Create multiple roles

• Restrict users to functionalities based on Roles

• Setting up github to push code with token

• Creating a JWT token

• Using the JWT token to call a secured API

• Using Postman to test our API's

• Mechanism to check if a particular JWT token is valid or not

• Extracting user information and role information from JWT token

• Complete source code