Users management Portal using Spring-boot, React.js, Mysql | Spring-Security, JWT, Roles, Auth

[@mufabaa]

thank you for this beautifully explained registry/login implementation!

[@yogeshverma2638]

real good work easy to understand , source code , working project ; All in one . really helped me Thankyou.

[@PhegonDev]

I'm glad it helped

[@hash1345]

how you have run the project,plz help

[@isaacnarteh8701]

Thank you Phegon; you are phenomenal! Great Job! This is the most insightful video ever seen on KZbin. As a new developer, this video provided all that I need to know about authentication with JWT tokens and Spring security. I couldn't have followed anyone else to get a better understanding of these concepts. Keep doing the great work, brother!

[@PhegonDev]

@@isaacnarteh8701 I've had it was helpful. Thanks for sharing Issac 🙏🙏

[@marvinlewis4113]

You are a legend! I'm so grateful for your video. From the bottom of my heart, I would like to thank you.

[@PhegonDev]

I appreciate

[@marvinlewis4113]

​@@PhegonDev Very sorry to bother you, but how would you allow people to stay signed in even after they close the tab?

[@kodiq3429]

the best video in whole youtube. It contains everything needed in 2,5h. Crazy work bro !

[@PhegonDev]

@@kodiq3429 😁😁 Thanks Kodiq

[@geniuspedia9508]

Thanks a lot for this wonderful video...

[@PhegonDev]

@@geniuspedia9508 🙏🙏

[@RyanTaio]

Amazing Tutorial for the backend. I haven't reached the frontend part yet but I'm sure it's going to be great as well. I was stuck on Spring Security JWT Authorization from 2 weeks and after watching this video I finally understand it. Thank you so much. Now I will be able to focus on some detailed projects.

[@PhegonDev]

👍🏽👍🏽👍🏽👍🏽👍🏽👍🏽👍🏽👍🏽👍🏽👍🏽👍🏽👍🏽

[@duongphan995]

bro saved me, thank you so much

[@PhegonDev]

I'm happy it helped

[@nanayaw7159]

Great UI

[@PhegonDev]

Thanks friend

[@suraphelojohannes5780]

I got Your video && my Problem get solved Thanks a lot.............. !

[@PhegonDev]

I'm happy tw's helpful. Thanks for your comment 👍🏽

[@nadetdevfullstack7041]

Excellent

[@PhegonDev]

Thanks man 🙏🏽

[@naigjvdvjdjdbdb]

Can u help me please

[@MatheusCampos-xr5bv]

very good video, u are awesome

[@sbasalan]

I would be very good choice to follow your video to build a clone of your work. Exciting 😀

[@PhegonDev]

@@sbasalan that's exciting 😊😊 Thanks

[@rahimullahhamidi4321]

Very Good Video ❤❤❤❤❤❤❤

[@ArchanSai]

how have you created the String secreteString = "84356...." ? @ TimeStamp - 25:23 in your video

[@PhegonDev]

It's a random values. Just put in long random values

[@isaacnarteh8701]

You can randomly generate one for yourself using online java compiler. The java method to do that is below: import java.security.SecureRandom; public class TokenGenerator { private static final String CHARACTERS = "0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ"; private static final int TOKEN_LENGTH = 100; // Adjust the length as needed public static void main(String[] args) { SecureRandom random = new SecureRandom(); StringBuilder token = new StringBuilder(TOKEN_LENGTH); for (int i = 0; i < TOKEN_LENGTH; i++) { int index = random.nextInt(CHARACTERS.length()); token.append(CHARACTERS.charAt(index)); } System.out.println(token.toString()); } }

[@fatimaezzahrasafrani9469]

Why is the token sent in the register function?

[@PhegonDev]

We only want admin to be able to register users. It's an User's Management Portal. We have admin who manages users. More like an enterise organization unboarding and managing her users

[@Rida0921]

I have online book store project where I want both user and admin to register themselves. What can bd done

[@sbasalan]

@@Rida0921 have you found a solution what you were looking for?

[@thanhtam7219]

I love u! It help me too much! ❤❤

[@PhegonDev]

😃😃 I'm happy it helped. ❤

[@ishratJahanEsha-b3g]

code show a lot of error . to configuration in jwt

[@moisesvillalba6615]

Great Video!

[@PhegonDev]

Thanks Moises

[@lovekhanna009]

Can you share same coruse me with angular as front

[@PhegonDev]

Just skip to the frontemd part kzbin.info/www/bejne/fXXFd6qtp7l7jLs&t

[@thenula__rathnayaka]

where is the sql part

[@ShirleyG-gm7kv]

Which should be changed to allow everyone to register?

[@PhegonDev]

For that, The permission role should be changes from ADMIN to USERS at the controller level

[@omardaanoun255]

Great tutorial! i want to know if there is any solution for the page refresh ??

[@PhegonDev]

perform a navigation. That will trigger a refresh. E.g navigate ('/') or to any other page of choice navigate('/login ')

[@rryann088]

how can we also store images pf user efficiently?

[@PhegonDev]

You can store images on the cloud and save the link of that image in your database. Or store the image on a folder in your computer or server and save the path to that image on your database.

[@RashidMd-ud4fj]

❤good

[@PhegonDev]

❤❤

[@СайкалБатырбекова-в4у]

Hello! Thank you for helping students!)) I have a question: is it necessarily to test before creating FRONT-END?

[@PhegonDev]

Yes it is. So you can detect and correct errors if present

[@СайкалБатырбекова-в4у]

@@PhegonDev got it. thanks!!

[@lauris5275]

But if I generate random token with extra expiration date + with role admin I will have access to react admin routes no? Is there a way to prevent that from hapening. I dont want anyone to get inside admin panel.

[@theBalancedByte]

I think they can't. Not unless your jwt secret is exposed

[@anilkumar-so5uf]

where to test the backend?

[@PhegonDev]

I used postman

[@jenishjustin7065]

how did you make postman where did it came from please expalain it

[@PhegonDev]

download and install postman. It is used for api testing. www.postman.com/downloads/

[@enocksigei]

This is good though the accessToken and refreshToken are the same yet it is not supposed to be like that

[@ankitaghadge.1337]

I didn't understand the code. Can u please give us an explanation?

[@PhegonDev]

@@ankitaghadge.1337 I think you'll need a more beginner friendly course. You can look /search separately for spring boot , react course to get acquainted with the basics first

[@ankitaghadge.1337]

@@PhegonDev i have basic understanding of spring boot and react js but I am not able to understand this spring security implementation

[@ankitaghadge.1337]

There is no getter setter methods in Our user, I am getting so many error in UserManagementService file

[@PhegonDev]

@Data from lombok helpd to auto generate getters and setters. You can use it

[@ankitaghadge.1337]

Only login and register API is working rest all admin API are not working even though I have added correct token i got 403 status code

[@ankitaghadge.1337]

I downloaded your projects backend zip file then added my database credentials and run the application then I tested in postman then only register and login API is working rest all API anmin/* nothing is working I got status code 403

[@ankitaghadge.1337]

Is this because I am using Java 17?

[@JamesEric-q4r]

this is a very good videos especially the aspect of using jwt token for authorization and authentication but i have a question from the frontend aspect why should i have to reload the page whenever am logged in for my logout button to show and the same for the admin aspect for my profile,userManagement, login to show, is it expected to show authomatically whenever am logged in as a user or admin, in the sense of user friendly and then how can i register as an admin in the frontEnd, since the first thing i see when i open the page is a login page, what if am not registered as an admin then how can i register cause for me to login as an admin i must have been registered at the firstPlace cause you are using the registration from postman, please i need a feedback as soon as posible thank you.

[@PhegonDev]

1, In your logout method. Have an implementation to navigate away from the page. This will trigger a component refresh. e.g navigate("/"). 2, For admin registration. You can create a separate component for admin registration. As you would not want the public to register as admin on your platform

[@JamesEric-q4r]

@@PhegonDev thanks it all makes sense now, i forgot using useNavigate from react-router-dom for navigation

[@JamesEric-q4r]

please a follow up question, can you make video of using jwt token for authentication or authorization without user role just authentication and authorization or do you have a video already for it

[@titashipuserge3934]

bro why do you pass a bearer token during registration

[@PhegonDev]

@@titashipuserge3934 we want admin to be able to register new users. It's more like an in-house app kind-off. You can modify to suit your use case. Once you understand the concept then cool

[@titashipuserge3934]

Thank you very much. Now I understand better. That part really confused me. But I have another question: why was it working fine when you were creating normal users on Postman without passing a token?

[@nithinkumarkodipaika]

when I'am hitting /getallusers endpoint the jwt token is not validating in backend

[@PhegonDev]

check your code again. And add multiple logs to see where the error is. It working fine if followed properly

[@ManishKumarSahu-jd2ww]

yess I am facing the same issue, were you able to solve the 403 forbidden for /get-all-users

[@afrazch6446]

@@ManishKumarSahu-jd2ww do you find out how to resolve it?

[@ApoorvaLavate]

how did you fix it?

[@hash1345]

plz share its database also

[@PhegonDev]

like how?

[@hash1345]

@@PhegonDev plz share sql code as well

[@hash1345]

I am not able to run the code

[@Afna.abubacker]

What is this secret string??? Can we give any ???

[@PhegonDev]

@@Afna.abubacker Yes. You can give any long characters

[@pankajthakur9760]

Hello Phegon dev Great tutorial i have setup it locally . i have issue after login / logout /add new user its not automatically refresh the page i have to relaod page manually?

[@PhegonDev]

you can reinvoke the component to handle a refresh.

[@Viki-v4p]

Bro , I tried to push my spring project in github and it failed , because iam having some aws credentials like keys , bucket name , locations etc in application properties file ...What can i do to push my code?

[@PhegonDev]

You should not push sensitive credentials to public repo, it's not a good practice. Ppl can use those credentials to access your account and disrupt your service. You should save them in an environment variable and refrence it when needed

[@Viki-v4p]

Can I use jasypt to encrypt the credentials???

[@PhegonDev]

@@Viki-v4p sure you can.

[@Viki-v4p]

@@PhegonDev Thanks for the info bro❤️

[@uricohavy5522]

I'm getting a 401 unauthorized error when trying to register a new user in Postman. Any ideas what's causing this and how to fix?

[@PhegonDev]

add more logs to your service to see which code is breaking. You shouldn't be passing in an auth token when logging it, but if you are, make sure it is not expired

[@GamingMaharajaHDS]

can i use java17 for same code

[@PhegonDev]

sure you can

[@whanderlust03]

hello, i tired following your video but ive encountered an http 403 error right after i started my spring app. i have csrf disabled just like in the video, do you pls have any suggestions on how to fix this problem?

[@PhegonDev]

I can't see what you doing on your code. But if you follow it correctly, it'll work, as it's woking for others.

[@ManishKumarSahu-jd2ww]

hey, were you able to overcome this 403 error, I am facing the same issue

[@ManishKumarSahu-jd2ww]

make "Authorization" as "Authorization " in the JWTAuthFilter

[@sriramrajkumar2774]

@@ManishKumarSahu-jd2ww I cant understand

[@LewiWanjohi]

I'm getting a 404 unauthorized error when trying to register a new user in Postman. Any ideas what's causing this and how to fix?

[@PhegonDev]

Add multiple logs to different steps in your service so you can see which code(method) is failing. By doing so, you'll know where the error is coming from

[@chirukurisushma5530]

In Github frontend there is app.css code please provide

[@PhegonDev]

the css code not usefull

[@NimmagaddaHarikiran]

why are settind the is accountnotexpired and is password not expiredtrue in the ouruser class

[@PhegonDev]

By default they are expired it is our duty to set and say they are not expired. Else authentication will fail

[@pubudunichanikawijesinghe4932]

Thank u very much for sharing ur knowledge.

[@PhegonDev]

Thanks. That a great observation and suggestion. You can call the api path "admin/register". As long we have the admin guard, we are good. That's a great one 👍🏽👍🏽👍🏽

[@xiaoming6958]

Please show about refresh token in react js

[@Viki-v4p]

Bro the way that you are handling the exception , can i do it for my companies projects..Is it valid or else i should handle it separately using Exception classes.

[@PhegonDev]

Use a Custom Exception Class

[@Viki-v4p]

@@PhegonDev Can you make the video for exception handling like how it actually to be.

[@Viki-v4p]

Bro ,is Learning spring boot worth? Because whatever content iam searching about spring boot in a websites are too old content and also most of them deprecated ..And I cant find my solutions in both youtube and websites?

[@PhegonDev]

It depends; 1. Are you already working in a company where java is required? If yes, then Spring Boot is worth it. 2. Do you have a strong background in Java? If yes, spring boot is worth it .There are java jobs and those companies most likely are using spring boot. 3. If your primary focus is in python or node or you are working for a company that majors in python or node, then spring-boot isn't worth it. Instead, you can focus on the technology for those languages. 4. If you are relatively new to programming, I’ll suggest you shouldn’t focus solely on spring boot. You should rather give more priority to python. As Python is popular in developing AI models, ML, Quantum computing and more.

[@Viki-v4p]

@@PhegonDevokay ..Thanks for that kind info.

[@dcm6267]

Good video. But there's a small problem, I have to manually refresh. Any solution?

[@PhegonDev]

Trigger a change in component state. That can be done by several ways e.g by navigating. navigate ("/").

[@dcm6267]

@@PhegonDev Thank you. I used " window.location.reload() ". Sucess.

[@zhaolunzhang8831]

Can I ask one question, when I click the frontend at the user management, it shows the error"Cannot read properties of undefined (reading 'map')". Do you know how to fix it? Can I send your email? Thank you.

[@zhaolunzhang8831]

Ok, I solved it. Thank you.

[@PhegonDev]

@@zhaolunzhang8831 nice 🙂

[@bakiriwalid7409]

this is by far ..the best video ever im jst facing error {statusCode: 500, message: 'No value present'} when i try to login can any one help on it thanks

[@PhegonDev]

Cross check if the login credentials exist in the database. You can add logging to different steps and methods when trying to perform a login. That will determine which method the error is coming from, although I didn't do this on the tutorial but they'll help to know which method is failing

[@bakiriwalid7409]

Thanks so much ..i geg it fix was username mismatch ..was my mistake..thanks so much was best tuto ever

[@dcm6267]

@@bakiriwalid7409 ​ how did you fix it? same issue on me. {statusCode: 500, message: 'Bad credentials'} message : "Bad credentials" statusCode : 500 [[Prototype]] : Object constructor : ƒ Object() hasOwnProperty : ƒ hasOwnProperty() isPrototypeOf : ƒ isPrototypeOf() propertyIsEnumerable : ƒ propertyIsEnumerable() toLocaleString : ƒ toLocaleString() toString : ƒ toString() valueOf : ƒ valueOf() __defineGetter__ : ƒ __defineGetter__() __defineSetter__ : ƒ __defineSetter__() __lookupGetter__ : ƒ __lookupGetter__() __lookupSetter__ : ƒ __lookupSetter__() __proto__ : (...) get __proto__ : ƒ __proto__() set __proto__ : ƒ __proto__()

[@irinaoltean5010]

Great tutorial! But I am now struggling with implementing session management further. Any ideas on how to add that?

[@ponirmahmud5017]

need to improve the voice. Demonstration is good.

[@PhegonDev]

noted