Building Controllers for Access & Refresh tokens | Testing APIs with Authentication & Authorization

[@ajaykotiyal427]

Very complicated, but well explained. thanks for sharing.

[@codewithsudarshan]

Go through multiple times, try to implement yourself, build more projects, with more practise you wil get the idea of it.

[@AvijeetShil-cs8sm]

Thank you so much brother. your tutorials are very helpful though I built Auth API gateway for my employer. These videos are fresher for me and I learned a lot from your tutorials. These gave me confident to do a little tweak and adjust things like my demand. Though I did optimize the codebase here and there, but the foundation is your tutorials.

[@codewithsudarshan]

Thanks a lot! I am glad you liked the series. The goal of the Backend series is to give a strong foundation to people, so that any type of backend project in Java they can make on their own.

[@patryklewandowski3456]

Great explanation, thanks!

[@codewithsudarshan]

Thanks a lot!

[@vius4129]

I just came across this playlist. I found it seems like a good playlist to start making a project in spring boot.But can you add videos for testing the same application whatever you have covered till. This will help as an end to end understanding. Everyone starts making projects but no one covers testing for that application. Please you should do that.

[@ibrahim-ry6sn]

Thanks again ❤❤

[@obertmudzingwa270]

Thanks for the insightful demos. Are you able to make just a demo project to show how to Spring Boot Security Jwt Login and Logout with or without Redis for token invalidation (blacklist)

[@codewithsudarshan]

Those topics not on current list in the plan. But token invalidation is there at server-side, but for logout, it needs to be taken care at frontend side too!

[@ibrahim-ry6sn]

Thanks ❤❤❤

[@sujitkumar2196]

Awesome bro thanks you making such kind of video. If you don't mind can you please share a source code with us?

[@codewithsudarshan]

Here is the link for source code: github.com/SudarshanShahCode/movieAPI-backend-YT

[@raj006]

Why we are not using @Autowired when we are declaring service objects in controllers? Please answer sir

[@codewithsudarshan]

Constructor injection is preferred over field injection, as part of best practises. One big reason is that, when we declare field as final and do constructor injection, there is no chance that fields will be NULL, which avoids NullPointerException. Also, @Autowired offers flexibilty of dependecy to inject at runtime, but this also may lead to runtime issues. The way it is done in the videos, will avoid any chance of fields not being declared, which is very useful. In enterpise applications and in code reviews, contructor injection is preferred over using @Autowired annotation.

[@raj006]

@@codewithsudarshan thanks for the knowledge sir.

[@raj006]

Hi can someone tell me what is the name of playlist which this video is part of?

[@codewithsudarshan]

The video is part of Backend series playlist, below is the link. Hope you like the video! kzbin.info/aero/PLdSSipYLKxHqzCIK5quzIAVdyB497JFtj&si=h3O_v7Om7dRmVYOg

[@ruban3461]

Its working for /register path...but forbidden for /login...why so??😢

[@codewithsudarshan]

Please check Security Configuration file, make sure you have excluded the login path too from Spring security.

[@prasanthsanjeevi2563]

Hi great explanation brother, Are you going to give any training in real time project

[@codewithsudarshan]

I am glad that you liked the video! The Backend series cover till now will give you enough knowledge to build any project that you want to. My purpose for bringing this series was to make everyone understand the core concepts required for building Backend using Java & Spring Boot.

[@prasanthsanjeevi2563]

Please reply brother any chance?

[@prasanthsanjeevi2563]

Ya bro so much, paid content also doesn't gave this much knowledge.. Bro what's your next series? Please reply

[@itsranim879]

Please complete the frontend (reactJs) of this application and thank u 🥺❤

[@codewithsudarshan]

Yes, there will be a frontend for it. I will require some time, but surely it will come.

[@sagarboyal5981]

Hi sudarshan bhaiya I'm getting 401 Unauthorised in api/v1/auth/register what should I do I will check many times but I don't understand where I can fix it 😢

[@codewithsudarshan]

Please check your SecurityConfiguration.java file, in that you need to include the register endpoint in the list of urls that are to be accessed without any authentication. I hope it helps!

[@sagarboyal5981]

@@codewithsudarshan Thank you bhaiya I'm forget to add @bean annotation 😓🤦🏻 now it worked ❤️‍🩹

[@PradhunyaShendge]

we can do this in sts also ?

[@codewithsudarshan]

yes, sure.

[@tryitfirst3802]

When will you upload next video? OTP and Email Verification too...

[@codewithsudarshan]

For OTP and Email verification, need some time.

[@niteshkumar5853]

I am getting forbidden in postman what to do

[@codewithsudarshan]

Please check SecurityConfiguration file. You need to exclude some paths for being able to access directly the Auth-related API. I hope that would solve your issue.

[@sirineweslati-g9k]

@@codewithsudarshan How I can do it please

[@evaslangat3037]

github link?

[@vikashkatiyar1225]

Hello bro , why you stop uploading video ?

[@codewithsudarshan]

For backend series, the fundamentals of building the backend is completed. Lot many things are there in backend, but I started this series for explaining the fundamental part. More video on backend series will come, but need some time.

[@sirineweslati-g9k]

I am getting forbidden in postman what to do

[@codewithsudarshan]

Please make changes in Security Configuration file, as some paths need to excluded from Spring security checks.

[@sirineweslati-g9k]

@@codewithsudarshan thanks ❤❤ good job it was very helpful