Using the experimental authorization server version 0.0.2 and the authorization code with PKCE!

[@BinSlayer1]

Awesome lesson Laurentiu! The PKCE explanation was great and you make it easily understandable. Thanks!

[@laurspilca]

Glad you liked it. I know you asked for it some time ago :)

[@miscvideos47]

Thanks a lot for this since there are very few tutorials on the new Spring Authorization Server! Small suggestion: could you please sort the videos in this playlist by upload date?

[@manoranjaniiit]

Great explanation of PKCE.

[@Jawwad124]

Please share more on this. I am trying to implement this for our project. But unable to get user roles in Resource server once user authorized.

[@chriseteka]

Great content Laurentiu, keep up the good works. I was trying out implementing an authorization server in a demo project, a project in which I intended to use reactive spring all through. I registered a user detail service but this time, using the ReactiveUserDetailService, which on like the usual UserDetailService returns a Mono from the loadUserByUsername(String s) method. Sadly the application refused to start on account that it could not find a bean of type UserDetailsService in context. Could anything be done about this or is there something I may be missing out on during the implementation?

[@laurspilca]

Hi Eteka. Honestly, I don't think the Spring Security OAuth project has ever been created to support reactive development. I saw that at least. Maybe it'll work with the new authorization server when it will be fully released.

[@chriseteka]

@@laurspilca Thanks for the response, I will stay updated in your channel.

[@roman_mf]

Hello Laur! Nowadays there is 1.1.0 already so things may be different back then, but what I've missed is how does the authorization server knows that code_verifier and code_challenge are required to be present as URL params? You didn't do any special configuration for this in your example.

[@laurspilca]

Hi. I recommend you watch the videos where I present the version 1.x in the Spring Security Fundamentals 2022 playlist on this channel.

[@gsdsg9374]

Hi Laurentiu, version 0.1.0 was released on 11 Feb. Seems that the new version broke your example. Now after submitting the GET request with the challenge code, instead of redirecting to the default login page (localhost:8080/login), there is now a 404 error. Any suggestions how I can fix this? Thanks

[@laurspilca]

Hi. Yes, my example is specifically for 0.0.2. We cannot assume any new version won't break the existing one because the authorization server is still experimental and doesn't guarantee backwards-compatibility yet. I will create soon a video for 0.1.0 and you will find it in the playlist dedicated for the experimental authorization server :) Cheers!

[@gsdsg9374]

@@laurspilca Thanks! Looking forward to the new video.

[@laurspilca]

@@gsdsg9374 Here's your video :) kzbin.info/www/bejne/Y2HCqKKBbKd4aas

[@bhushanrohankar6017]

I am Having 3 Application for this I am building 1 authorization server for better communication and security. and also i want to do SSO on this 3 application where my authorization server will act as a Identity provider. my question is how can i inter-communicate with this 3 application means. 1. for A Service I authenticate the user and get access token then i want to communicate with B -service then how can i do this with access token ? 2. and one more scenario if someone logins into my B-service then i want to give access for other 2 services(A and C) ? 3. Implementing SSO with Authorization server is it possible ?

[@vishalsundararajan1228]

I would wait atleast till 1.0, 0.x is like an alpha version

[@laurspilca]

Yes, as I said in the video also. It's not mature yet. We'll probably have a mature version not earlier than one year from now on in my experience :)