Securing Spring Boot Microservices with Keycloak using OpenID | OAuth2.0 | JavaTechie

[@__nitinkumar__]

Hey Java Techie, I would love to see Keycloak integration with a microservice and also if possible end to end with a frontend as well.

[@RameshGanapathy-uw9vs]

Grate , wow, Super, Very simple example covered the entire oauth2 security functionality

[@ajeetchouksey1167]

Thanks for a great content on keycloak would love to see Keycloak integration with a microservice

[@abhijitprusty]

Hi Basant, this is an awesome explanation and detailed video on how to set up and use it with microservices. I really njoyed it and i would try it as well. Please keep making such videos. Basant tame jaha bhi karucha, bahut hi bhala kama. We will always support and encourage you.

[@Javatechie]

Thanks bro 😊

[@Pain-qu5nr]

@@Javatechie hi can you do one using filter chain??

[@ArunSingh-tj9li]

Very clear explanation, always I love your the way you explain the concepts, thank you.

[@jeffbarnhart6441]

great tutorial. create more please. do one with a public flow and calling the token, userinfo, and other endpoints.

[@ShayaniDas]

Superb video sir. Thank you so much for such amazing content.

[@SatishNirmal-bl6nv]

Very Clear and straightforward explanation video for role-based authentication.👍

[@ranjandas7891]

Awesome explanation Thanks Bro!

[@sof2573]

Thanks. It was clear and helpful! Good job!

[@krishnasuripaka2480]

Excellent Explanation bro...awesome...

[@bhimeshtati8395]

Excellent!!! Thank you Sir

[@nguyenquan4836]

Easy to understand compare other channel, help me so much, Thanks

[@jeanribeiro3438]

Thanks for the content! Very helpful!!!

[@janivesh]

Nice session❣

[@yogeshchaudhary621]

Thanks a lot. This is exactly what I was looking for.

[@lovefarming10]

This is really saved me, thank you so much!

[@nurlanmrahov198]

Nice job. Congrat.

[@RAJU9622]

Excellent content

[@shwetapednekar6697]

Amazing explanation 👏

[@aadiraj6126]

Enjoyed it. Sir, plz integrate it with Microservices ASAP. We need that detailed video urgently 🙏

[@aryanaryan9759]

Ya sir .every much .waiting for this video

[@debpratimghosh8650]

Awesome bhai

[@gauravk002]

Another Masterpiece ✌

[@manindersingh6371]

I would love to see Keycloak integration with a microservice

[@satyaprakashgalipelli3766]

Hi Java Techie, this demo is really good and made me clear in understanding in some parts. Please refer me if you have a demo with Spring MVC (Non-Boot) application

[@satyaprakashgalipelli3766]

never mind. I have done changes on my side.

[@imshaggy619]

Can you please share the project if possible. I am also looking for Spring MVC

[@amitghatage774]

Excellent

[@akhilstksa5736]

thank you soo much bro... great work...

[@pvreddytechnology7032]

Clear explanation 🙏 Thanks 🙏

[@Javatechie]

Thank you 😊

[@pvreddytechnology7032]

@@Javatechie Can you please make tutorial on Apigee Authentication if possible

[@Javatechie]

I am not aware about this. I will check and update

[@pvreddytechnology7032]

@@Javatechie thanks

[@omit_krish]

After install while run key cloak server getting error sir I was used bin/kc.bat start-dev but getting error could you please rectify problem😢

[@pratishrutipanda6461]

Nice content 👍

[@edson-moretti]

In postman: "error": "RESTEASY003650: No resource method found for GET, return 405 with Allow header"

[@Javatechie]

Check the http method type

[@shrirajbhat4472]

@@Javatechie I used Get, the same as you yet I am getting the same error

[@foddiebyage9696]

So late uploading to seee such good tutorials

[@KhajaYT-zb2th]

Keycloak Java Adapters were removed from Keycloak codebase and they are not supported anymore.

[@sachinchamute5525]

Basant sir It is really great video,can you please make video on integration of zoho crm with springboot

[@DJSS855]

Thanks for this video

[@imshaggy619]

Hi Basant, I am trying to achieve the same in Spring MVC project, unable to find any documentation for the same. Followed the official one but it is directly opening the controller get mapping page instead of asking for credentials. Please help

[@smrutisouravmoharana2658]

Hii sir, I had seen the video but i have a doubt i.e you are using role based authority in a single microservice class if I use api gateway how to use role based authority

[@rajeshb5971]

Could you explain the redhat sso and what is that wildfly?

[@duncanodhiambo471]

Thank you sir!

[@sheikhhafeez3766]

@Java Techie I am getting below error Client 'myclient' doesn't have secret available failed to turn code into token status from server: 400 {"error":"invalid_client","error_description":"Invalid client credentials"} In response I am getting login page [html back] Can anyone help pls

[@Javatechie]

Validate your client id and secret key if it's not working regenerate it and try again

[@sheikhhafeez3766]

I tried multiple times...I am able to get token from keyclock but while accessing rest points this error is coming I tried with keyclock 15.* & 19.* but same error in both versions Tried with Spring boot version 2.5.* &2.7.3 Java 11 & latest eclipse 2022 release

[@iarpanbose]

But what if my application have a sign up section and i want users to be created from my application in that case how keycloak will get those data? And can keycloak use my database instead of its self?

[@Javatechie]

Hi Arpan good question . I didn't explore much on it . I will check and update you

[@GauravSharma-ry5qf]

​@@Javatechie any update on this

[@Javatechie]

@@GauravSharma-ry5qf sorry i misunderstood your question. Why will you use keycloal if you want to maintain user credentials with your own ? What do you understand about 3rd party identity providers? Usually you will get the options to register a user in the keycloal user interface itself so the user can sign up from there

[@GauravSharma-ry5qf]

@@Javatechie ok , but after exploration I got know that Oauth2 mainly used for Authorization, so for authentication if we have separate service and for the Authorization only we want to use that , so how we can leverage that ?

[@Javatechie]

Identity providers also support Authentication buddy.

[@nesreenmohd665]

Thank you!

[@deepbajaj9589]

How we can use kid rather then realm key from keyclosk_url/auth/realms/openid-connect/certs

[@jayeshnayee6735]

Please make video for spring boot and mysql with keycloak embedded project I need only automatically create database and stored data for keycloak clients in table .

[@engalibadouin5222]

Hi, java techie thank you for your benefit tutorial. What is dependency management do?

[@HimanshuSharma-vp8xi]

Hey Java Techie, i have one doubt. how this keycloak and openid works with microservice architecture where one microservices is calling another microservice. so how to authenticate during this call.

[@Javatechie]

Will cover this part

[@innocentmutyavaviri8205]

@@Javatechie Please do, that will be really helpful

[@Javatechie]

Sure buddy

[@aloktiwari4188]

Please create a vedios with keycloak and with all the microservices components

[@crowdtweet]

i am getting Undertow request failed HttpServerExchange{ GET /auth/}: java.io.IOError: java.io.FileNotFoundException: Invalid file path error

[@arghyamitra3281]

Great tutorial as always 🎉.. one request sir , can you please make one tutorial on spring security jwt with spring cloud api gateway .. on that please

[@Javatechie]

Okay buddy I will try

[@arghyamitra3281]

@@Javatechie thank you sir ❤️

[@francksgenlecroyant]

@@arghyamitra3281 can we be friends? Maybe we can help each other to build microservices and all those event-driven concepts

[@vipinkoul595]

Awesome!

[@cuongle9888]

Hi, I want to ask how to integrate keycloak into api gateway, thanks

[@Javatechie]

I will do that

[@trantuananh5150]

When I add @RolesAllowed it always return NullPointerException. Anyone have any idea about this?

[@Javatechie]

Just debug your code and find out where exactly it's giving you NPE

[@gogairemashvili8469]

how did you solve this error??

[@trantuananh5150]

@@gogairemashvili8469 I'm not really sure with this annotation. I decided not to use it anymore.

[@shilpasingla1739]

Hello Basant sir...is it possible not to select open I'd or saml in keycloak for an internal application

[@Pain-qu5nr]

Hey this doesn't work. Followed everything but my api's are still accessible without the security. 😭😭😭😭

[@divyakornana1104]

can we use multiple roles for one method? If yes then which user password we have to give in postman?

[@Javatechie]

Yes you can define. It’s upto you with which user you want to access your api

[@i.vigneshdavid1698]

Is it possible to implement form based and jwt token based authentication in a single app. Currently i implemented spring oauth2 based keycloak sso implementation it works fine in browser.but when i hit the endpoints in postman it return keycloak login page as response

[@Javatechie]

In postman you must need to pass token as part of headers

[@i.vigneshdavid1698]

@@Javatechie yeah i did this but still i get keycloak login page as response.

[@Javatechie]

Update token in postman

[@ArvindKumar-y4f2l]

it is not working with the latest version of the keycloak

[@Javatechie]

I need to check

[@abhishekpatil8271]

Thank you so much

[@nameshs9543]

Thanks Brother.

[@mcavalcantesouza]

I´m using Spring Tool Suite 4-4 with Keycloak 20.0.2. When I extend the class KeycloakWebSecurityConfigurerAdapter like below: @KeycloakConfiguration public class KeycloakSecurityConfig extends KeycloakWebSecurityConfigurerAdapter I get this error hovering the class KeycloakWebSecurityConfigurerAdapter: The type org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter cannot be resolved. It is indirectly referenced from required type org.keycloak.adapters.springsecurity.config.KeycloakWebSecurityConfigurerAdapter Have you seen this error?

[@dildarsk4167]

How to configure post calls in keycloak. Getting 403!!

[@shaileshsathe9779]

Hi Java Techie, This video is very informative. I have one spring boot REST API application which has Login and Signup API and other APIs. I need to have Authorization server, Resource server in this same application using JWT. This way I can save the resources instead of separate server deployment. Can you please end to end flow using Spring Boot 3, Spring Security, Spring Boot starter Authorization server and JWT ? It would be very helpful

[@Javatechie]

Okay i will

[@shaileshsathe9779]

@@Javatechie It would be great to see that

[@at5517]

I would love to see example using SAML as well

[@RAJU9622]

Basant please do for SAML integration also

[@i.vigneshdavid1698]

Yes

[@cookies4techies992]

Now I have downloaded keyclock 18.0.2. There is no standalone.bat inside the bin folder any idea how to start it.

[@younisabbasi3656]

kc.sh or kc.bat run command like "kc.sh start-dev"

[@maninee1457]

​@@younisabbasi3656 I have tried this...but no luck. It is due to Any jdk issue??

[@gt-uj6fz]

Hi java techie I love your tutorial videos. However do you have a video about applying security Jwt without using websecuritywebconfigurer since it was deprecated in spring boot 2.7.0 . Or planning to make a new video about it?

[@Javatechie]

I will remake a new one

[@pavanbhagathi6958]

please intergate with microservices and also how to add releam via code please?

[@rishabhtyagi178]

How to get access token without using postman? I mean through spring boot code can we get it?

[@vipinkoul595]

Do we always hard code the user and roles in spring boot application? Is there any other way to provide those information at method level (instead of hard coding)

[@ThwetThwetMar]

Hi, could you explain checking scope instead of checking roles in Controller? Thanks.

[@KaushalKumar-mr7ez]

Can u do the same for microservice and angular UI?

[@Javatechie]

I will do it using microservice it's in my queue

[@emad_arnesto9175]

hello sir any tutorial about keycloak security spring boot and angular?

[@Javatechie]

I have not yet tried but don't think it's complex since already we have backend api we can easily integrate to frontend .

[@emad_arnesto9175]

@@Javatechie ok thanks

[@lts8683]

Please, create a vedio to explain how to change database of keycloack, how to adapt keycloack with an app that have already table users and roles?

[@vignesh3184]

Sir,Pls make an video about bouncy castle , private key and public key with spring security

[@ruptamsadhukhan7834]

How can I use the users from User Table of Database?

[@Javatechie]

Please check out my spring security playlist video with Facebook example

[@ruptamsadhukhan7834]

@@Javatechie I meant using Keycloak. In keycloak console you are manually adding users. But my application already having user in user table how can i integrate keycloak?

[@Javatechie]

Not sure buddy need to check

[@three_bachelors]

Hello sir please make video of BPM , jBPM, Camunda ,Flowable

[@Javatechie]

I will

[@rajkumarsjc]

Thank you. How do we pass key cloak certificate?

[@venkatasiva9517]

Hi Java Techie, i followed the same process the way you did. but am getting 401 always. Possible to help?

[@nikhiljadhav5641]

How can we store user data at keycloak?

[@raghuvardhansaripalli9636]

Thanks Basant for this video. Its really excellent. I have a question. At present we are generating the token in the postman and testing the APIs. From GUI, whenever a user logs in as an admin/user, then how does a token gets generated dynamically in the spring boot and calls the respective API. ? Please answer my question. God bless you :)

[@Javatechie]

Can you checkout my jwt angular video you will understand this flow

[@raghavamuramreddy1323]

Hi java techie, can you please do one video for JpaStreamer for update record

[@Javatechie]

Hi Raghav , JpaStream can't be use for post and put

[@raghavamuramreddy1323]

@@Javatechie actually jpastreamer not getting realtime data from db, its maintaining cache

[@Javatechie]

Not getting how did you concluded it's getting data from cache

[@raghavamuramreddy1323]

Whenever I updated record at db manually then try to get record using jpastreamer not returning updated value its returning old value only

[@raghavamuramreddy1323]

@@Javatechie because after I changed column value at db still returning old value

[@dalu_]

Doesn't work. I'm always getting 403, despite the token being sent via Postman.

[@rexsam3134]

In real time how can a company implement Keycloak if number of users are > 99999999?

[@Javatechie]

Keycloak is third party authentication provider if you use their service then you must need pay them as per your need

[@rexsam3134]

@@Javatechie sharing employees information is very crucial and this is crucial authentication info that is to be considered carefully. Which companies have implemented keycloak?

[@deeplife9654]

If I have million user , then how can keyclock manual adding user can help 😢

[@Satenc0]

please do a saml example too

[@cd62]

Please create a video keyclock with microservices

[@locuriososaquierestu]

muito bom!

[@VM31416]

Can you enable subs, please?

[@vineetsharma802]

Sir, plz integrate it with Microservices ASAP

[@raghuvardhansaripalli9636]

Basant, Again i have gone through your video. One doubt i have. My SecurityConfig class is not getting compiled. I am getting error in "KeycloakWebSecurityConfigurerAdapter". After clicking cntrl+shift+o in my eclipse its still showing red color. I am using jdk 17. May be the code is not supporting for java 17. can you guide me where to get the security config class for openid. ? You are blessed by God by having good intelligence by gaining good knowledge. Thanks for all God bless you..

[@Javatechie]

Hi Raghu, drop me an email [e-mail] we can connect and check

[@raghuvardhansaripalli9636]

@@Javatechie thanks Basant