Spring Boot OAuth2 Social Login with Google Example

[@CodeJava]

Download the sample project in this tutorial: www.codejava.net/frameworks/spring-boot/oauth2-login-with-google-example

[@yadav117uday]

this is the most accurate tutorial which did things properly

[@dmitry1445]

Thanks for the tutorial. Hi from Belarus)

[@CodeJava]

Welcome! Greetings from Vietnam :)

[@David-wf3cc]

Where can we get code for front end and other files not included in git

[@CodeJava]

in my course on Udemy: www.udemy.com/course/spring-boot-e-commerce-ultimate

[@igorpavlenkov3658]

Thanks for this tutorial. Hello from Russia)

[@CodeJava]

Welcome! Greetings from Vietnam :)

[@Nguyễnkiên-j9s]

@@CodeJava em cũng Người Việt ạ

[@sagarsri4143]

Superb 👌 explanation ✌️

[@sagarsri4143]

Will you please make video on role based logins.

[@CodeJava]

including registration (sign up)?

[@eugenefeng511]

Thank you for saving me. That's exact what I want.

[@CodeJava]

Glad I could help!

[@AndresCodifica]

hi , i need help, my error is oauth2.core.oidc.user.DefaultOidcUser cannot be cast to com.co.rastros.oauth.CustomOAuth2User, i follow the video but in the step CustomOAuth2User oAuth2User = (CustomOAuth2User) authentication.getPrincipal() in the class OAuth2LoginSuccessHandler it's not possible, Help.

[@ktn4]

That's what I need. Many thanks.

[@CodeJava]

You're welcome! Happy learning!

[@ai6566]

Thank You. This was very informative session.

[@CodeJava]

Glad it was helpful!

[@lts8683]

Thanks, please keep going

[@CodeJava]

Thank you, I will.

[@phamluc2661]

I'm newbie with Spring Boot, having a question Can I use the OAuth2 authentications for mobile app?

[@CodeJava]

I think it's possible though I haven't used it for mobile apps.

[@roan1435]

Hi Nam. I followed almost similar to you what you did in this tutorial. But I'm get and error "principalName cannot be empty"... Do you have any idea why i'm getting this error?

[@CodeJava]

Kindly refer to this Stackoverflow's thread: stackoverflow.com/questions/63352692/spring-security-5-with-oauth2-causing-principalname-cannot-be-empty-error

[@charagergi5316]

I have a question, OAuth2 works with a token for authorization, here I can't see any function for the token. It is managed automatically or we dont use tokens?

[@CodeJava]

everything is done by Spring OAuth library so we just write some configs then focus on the business logics.

[@lokeshdandasena6766]

it was nice that u have provided some information but it seems like u are starting from the middle as you have files in the application before even starting to explain, you are not saying anything about the application (i think you have other microservices as well), you should walk through the application so that the purpose should be clear. For example - you have said to add a property to the entity table, I think you are not clearly describing it. please describe it properly so that it will help others.

[@CodeJava]

Thanks for your feedback. I understand what you meant. However, the main purpose of video is to show you guys how to integrate social login functionality for an existing Spring Boot application, you it supposes that you already have one.

[@bennteast1776]

Can we please have the full source code, the article doesn't have all the code needed @CodeJava

[@CodeJava]

You can get the full code if enroll in my course here: www.udemy.com/course/spring-boot-e-commerce-ultimate/?couponCode=SPRING08

[@bennteast1776]

@@CodeJava can you help me have the customerService class where i can see the logic there

[@hanumantd]

Can you please post database table creation scripts?

[@ethandsa1966]

Thank you for the tutorial. How do I deny access if the user doesn't already exist instead of creating a new user?

[@CodeJava]

Oh, that's not the purpose of social login, which allows users to login using their own google accounts - unanticipated. If you want to deny access in such case, just redirect the user to the login page with an appropriate message: httpResponse.sendRedirect("/login");

[@ethandsa1966]

@@CodeJavaThank you so much for your reply. I'll try that out.

[@ipox0090]

Can you tell me where the OAuth2User 22:47 you wrote is, why can't I see it. Can you help me explain.

[@CodeJava]

it is from Spring Security OAuth2 dependency: spring-boot-starter-oauth2-client

[@ipox0090]

@@CodeJava Thank you.

[@maral-erdenetumursuh4844]

Hello, thank you for great tutorial. I've question about security implementation in micro service project. In cloud gateway can not add spring-boot-starter-web dependency. So cannot extend WebSecurityConfigurerAdapter. How i do my filter this kind of architechture.

[@CodeJava]

isn't it spring-boot-starter-security?

[@trinhquycong.2001]

This tutorial's great sir, but how can i implement this into a fullstack application, let say Spring boot & Angular, since it involves Rest api, can you give me some advice? Thank you in advance!

[@CodeJava]

I will publish such kind of tutorial in future. Thanks for coming and asking :)

[@trinhquycong.2001]

@@CodeJava you're so enthusiastic, hope you do well in this new year!

[@buiucnhan5623]

Can you make a video with Reactjs as the front end?

[@CodeJava]

Yes, I will.

[@stevechao4012]

Thanks for the great tutorial! I was able to log in using g-mail with my original project!! And I am able to put g-mail user data in SQL Server DB. But after I log in with Google, the registered account seem do not recognized with my original roles set thus I get a 403 forbidden when I'm using google accounts to login. Can you suggest any leads to combine my original roles set with google accounts?? Thanks a lot!

[@CodeJava]

How do you check the role of a user? You need to update your custom OAuth2User class: update roles in the getAuthorities() method.

[@stevechao4012]

@@CodeJava Thanks again ! I manage to get in to the page, but then I found that my Authentication was empty. I use SecurityContextHolder.getContext().getAuthentication() to get user information but it returned null, could it be possible that I have to do something to the JWT that Google sent to me ?

[@rahilbaig3873]

Hi, I am getting an error saying " org.springframework.security.oauth2.core.oidc.user.DefaultOidcUser cannot be cast to com.bookstore.oauth.CustomOAuth2User" it is occuring on this line ---> "CustomOAuth2User oAuth2User= (CustomOAuth2User) authentication.getPrincipal(); " it cannot able to cast to CustomOAuth2User.

[@CodeJava]

Do you return a CustomOAuth2User object from the method loadUser in the CustomOAuth2UserService class?

[@rahilbaig3873]

@@CodeJava Hi, I really appreciate for your response. when I ran the code in debug mode , I see that CustomOAuth2UserService is not invoking, debug is directly going to OAuth2AuthenticationSuccessHandler. Please advice me, I have pasted the code below. Thanks in advance controller: @Controller public class UserController { @RequestMapping("/login") public String home() { return "login"; } @RequestMapping("/welcome") public String welcome(Model model, Principal principal) { model.addAttribute("userDetails", principal); return "welcome"; } security Config: ------------------------- public class SecurityConfig extends WebSecurityConfigurerAdapter { @Autowired private CustomOAuth2UserService oauth2UserService; @Autowired private OAuth2AuthenticationSuccessHandler oauth2AuthenticationSuccessHandler; @Override protected void configure(HttpSecurity http) throws Exception { http.authorizeRequests().antMatchers("/oauth2/**").permitAll().antMatchers("/welcome/**").authenticated() .anyRequest().permitAll().and().formLogin().loginPage("/login").and().oauth2Login().loginPage("/login") .userInfoEndpoint().userService(oauth2UserService).and() .successHandler(oauth2AuthenticationSuccessHandler).and().logout().permitAll().and().rememberMe(); } } Service: ------------ @Service public class CustomOAuth2UserService extends DefaultOAuth2UserService { @Override public OAuth2User loadUser(OAuth2UserRequest oAuth2UserRequest) throws OAuth2AuthenticationException { OAuth2User oAuth2User = super.loadUser(oAuth2UserRequest); return new CustomOAuth2User(oAuth2User); } } OAuth2AuthenticationSuccessHandler -------------------------------------------------- @Component public class OAuth2AuthenticationSuccessHandler extends SimpleUrlAuthenticationSuccessHandler { @Override public void onAuthenticationSuccess(HttpServletRequest request, HttpServletResponse response, Authentication authentication) throws IOException, ServletException { // TODO Auto-generated method stub CustomOAuth2User oAuth2User=(CustomOAuth2User)authentication.getPrincipal(); String email=oAuth2User.getEmail(); System.out.println("Customer's Email"+ email); super.onAuthenticationSuccess(request, response, authentication); } }

[@CodeJava]

@@rahilbaig3873 your code seems to be fine. Check if you use @EnableWebSecurity for the config class, and is the dependency spring-boot-starter-oauth2-client present?

[@aideng5193]

​@@CodeJava Hello Ty for the tutorial, I have the same problem and have been stuck for hours ... I have @EnableWebSecurity for the config class, and the dependency spring-boot-starter-oauth2-client is present. Any help please ? :(

[@aideng5193]

CustomOAuth2User : codepad.org/mg8M3n2D OAuth2LoginSuccessHandler : codepad.org/hRgg6swS CustomOAuth2UserService : codepad.org/IyyV6sat Configure Class : codepad.org/su23grlu CustomOAuth2User : codepad.org/mg8M3n2D Thank you sir

[@43098108]

Thanks for this!

[@CodeJava]

No worries! Glad it helped.

[@mjpannu5210]

Amazing! Thanks alot

[@CodeJava]

You're welcome!

[@mjpannu5210]

@@CodeJava Can you please make a video on how to properly authenticate and authorize requests when I have multiple microservices and we want a single authentication server

[@CodeJava]

@@mjpannu5210 Noted your suggestion. I will do it in future because I'm busy making my new course on Udemy this time.

[@Nguyễnkiên-j9s]

anh ơi, tại sao trong fle pom ở cái source code bên dưới phần miêu tả a đính kèm, trong file pom a có để như này 1.8 e đang dùng java 17 thì e thay 17 vào thì có lỗi bắn ra còn để nguyên thì chạy được lí do là gì anh nhỉ? mong được anh reply ạ

[@CodeJava]

có thể là IDE của em chưa hỗ trợ Java 17 chăng?

[@shawaalsaif2144]

I have two Authentication provider Google and Facebook. As you set authentication provider to google what if the user logs in with facebook?

[@CodeJava]

then you have to check provider type in the CustomOAuth2User object (or something else - I don't remember), and update the provider type in database accordingly.

[@shawaalsaif2144]

Thank you for replying and this video helped me in understanding oauth2 better and heres how I got that wether the user logged in with fb or gmail OAuth2AuthenticationToken oauthToken = (OAuth2AuthenticationToken) authentication; OAuth2AuthorizedClient client = clientService.loadAuthorizedClient( oauthToken.getAuthorizedClientRegistrationId());

[@CodeJava]

@@shawaalsaif2144 Look at the OAuth2UserRequest class as the parameter of the loadUser() method in a class that implements DefaultOAuth2UserService

[@HaiNguyen-qm3ft]

Trong trường hợp, login with GG thì password trong db là null. Vậy chức năng change password dành cho tài khoản làm cách nào để có thể sử dụng vậy anh. em cảm ơn anh

[@CodeJava]

khi đó thì em nên kiểm tra authentication type của user là database thì mới tiến hành đổi mật khẩu.

[@potararaj2642]

Thankyou Nam ha min

[@CodeJava]

Welcome 😊

[@AjayGupta-ob8oe]

Thanks nam

[@CodeJava]

you're welcome. I always remember your request about Spring AOP.

[@Nguyễnkiên-j9s]

a ơi lúc em download source code vè chạy thì nó cứ báo lỗi là Connection refused: no further information em kiểm tra lại thông tin trong file properties kĩ lắm rồi mà cứ báo v

[@Nguyễnkiên-j9s]

a ơi ngoài ide a đang dùng thì a có dùng intellij idea ko ạ

[@CodeJava]

Anh có dùng IJ. em có dùng database ko? Kiểm tra javascript error xem.

[@rajashekar5755]

NAM im doing project can you please help me with this, When User enters into my website User should register first and then he needs to be verified by Email so that he can login using those crediantials.

[@CodeJava]

So you can follow the video "Spring Boot Email verification" here: kzbin.info/www/bejne/bZ65hZmkhK59hZo

[@tuannguyen-il5oh]

Could you guild to how to force user choose account google to login(when click login with google redirect a page allow choose account google) at video browser get account google we have logined

[@CodeJava]

just customize the login page, display Login with Google button only.

[@babisvasilopoulos5666]

Is any available repository to download the source code

[@CodeJava]

I'll put the code into a separate article, which will be published in near future.

[@charagergi5316]

Hi the video was really helpful, but can I find the source code somewhere? Thank you

[@CodeJava]

source code will be published in a companion article.

[@VIVEKSINGH-zk4pv]

Hey I am getting error principalities cannot be empty

[@CodeJava]

could you share the full, detailed exception stack trace?

[@никитаснигиревич]

where is git?

[@CodeJava]

Coming soon. I will share the code when I publish a text-based article for the same topic. Thanks for watching :)

[@dmitry1445]

@@CodeJava a month has passed and there is no article or gita

[@buukhanhong40]

Anh có dạy khoá tiếng Việt không ạ

[@CodeJava]

ko em ạ. Anh chỉ có khóa tiếng Anh thôi.

[@sanghub1642]

Please helps me. I have problem in class Oauth2LoginSuccessHandler with error: can't convert CustomOauth2User to ....

[@CodeJava]

kindly show me the full error/exception here.

[@sangha1722]

@@CodeJava Full error/exception here: java.lang.ClassCastException: org.springframework.security.oauth2.core.oidc.user.DefaultOidcUser cannot be cast to com.example.oauth2Google.entity.CustomOauth2User. Please seen help me!

[@CodeJava]

@@sangha1722 You use the wrong type for the CustomOAuth2User class. It should implements the OAuth2User class. Check the video again.

[@sangha1722]

@@CodeJava My class CustomOAuth2User: "codepad.org/pPNFzKEr". And Class Oauth2LoginSuccess: "codepad.org/fvK6mAxM" Please seen help me! Thanks.

[@никитаснигиревич]

@@sangha1722 Did u fix this problem??? i have this error too

[@arwaalblooshi6944]

Can you please do Linkedin login? thanks

[@CodeJava]

Yes, I will. Thanks for watching :)

[@vuvankhiem478]

Anh cho em hỏi là làm sao để lấy được avatar về được ạ

[@CodeJava]

look at the attributes in OAUth2User object: oauth2User.getAttribute("name");

[@nilsahyadri]

can you send all code or github link.

[@CodeJava]

kindly find in the written article at www.codejava.net/frameworks/spring-boot/oauth2-login-with-google-example

[@cuongnguyenminh6235]

Anh có chanel bằng tiếng Việt ko ạ, em cảm ơn anh

[@CodeJava]

anh chỉ có kênh tiếng Anh này thôi em ạ.

[@sagarsri4143]

Please make video on role based login from scratch

[@CodeJava]

did you check this video? kzbin.info/www/bejne/n2OUmWmKnbqcjcU

[@sagarsri4143]

@@CodeJava thank u

[@masnaswamy4067]

java.lang.IllegalArgumentException: principalName cannot be empty., HOW TO SOLVE THIS EXCEPTION BRO

[@CodeJava]

tell me the properties you're using for Spring OAuth configuration.

[@masnaswamy4067]

security: oauth2: client: registration: github: client-id: c23e2fe8ec9fdcaa0d21 client-secret: b81030d3df8c8f51f177427aa627cf21cf007c33 scope: - user:email - read:user

[@CodeJava]

@@masnaswamy4067why github? are you configuring for google for github? for google, the configuration should be like this: security: oauth2: client: registration: google: clientId: clientSecret: scope: - email - profile

[@masnaswamy4067]

@@CodeJava no bro i have configured for GitHub only using github oauth properties .,not google

[@CodeJava]

so you need to follow this video: kzbin.info/www/bejne/qJTMfmmgaNiii9U

[@tuananhtran4390]

Anh có thể làm 1 video với Okta mà SSO đc ko ạ :((

[@CodeJava]

khi nào anh có thời gian em ạ.

[@minhthangngo4431]

Lỗi uỷ quyền thì phải làm sao ạ

[@CodeJava]

em gửi lỗi chi tiết (exception) được ko?

[@minhthangngo4431]

@@CodeJava em fix đc rồi anh ạ. thêm cái link uri là đc

[@n7-caovanson381]

a ơi giúp e với

[@sunnysehgal8029]

Please share the source code

[@CodeJava]

Kindly follow the video by now because I will publish the code in an article later.

[@adamdecarte4847]

HI, my oAuth2User does not have .getAtribute() method. Only .getAtributes() & .getName()

[@CodeJava]

Make sure it is from org.springframework.security.oauth2.core.user.OAuth2User. Reference: docs.spring.io/spring-security/site/docs/current/api/org/springframework/security/oauth2/core/user/OAuth2User.html

[@xtrange2152]

Anh ơi cái login google em ok r nhưng có vấn đề là nếu em edit user theo kiểu gọi MyUserDetail ra để lấy người dùng đang đăng nhập hiện tại thì nó sẽ ra null nếu em login bằng pass vs mk bth thì ok ko sao hết vấn đề ở chỗ đó thôi ạ. Thì phần anh làm là a để oauth2detail riêng ra nên em nghĩ là 2 thg nó ko phân biệt đc nhau ạ em để user role là admin mà login bằng nó ko hiện phần của admin luôn khá ảo

[@nienpingchen4967]

How can i get the profile photo from facebook or google?(oauth2User.getAttribute("name")? can i get a photo from keyword "name"??) Thank you so much for all your springboot tutorial, it help me finish my project , so i can start to find a job !

[@CodeJava]

I think you need to study OAuth2 attributes of Google and Facebook to know which attribute used for user photo image.

[@nienpingchen4967]

@@CodeJava ok , i will do it , thanks again!