How to integrate aut0 in springboot

Auth0 In Spring-Boot

What is auth0?

• Auth0 is a open-source service for providing authentication and authorization.
• You can create a auth0 application on the auth0 server, then it will generate clientId and client secret to you.
• Then you don’t need to create any authentication or authorization business in your machine
  which can cut the unnecessary cost.

How to use auth0 in spring-boot?

• Firstly, you are supposed to create your auth0 application.
  • applications->applications->choose the category -> create application
    
• Secondly, you are supposed to create an application api to let your resource application can be protected
  
• Thirdly, you can test the newly api for obtaining a token by curl cmd.

  curl --request POST \
  --url ‘<DOMAIN>/oauth/token' \
  --header 'content-type: application/x-www-form-urlencoded' \
  --data grant_type=client_credentials \
  --data 'client_id=YOUR_CLIENT_ID' \
  --data client_secret=YOUR_CLIENT_SECRET \
  --data audience=YOUR_API_IDENTIFIER

• Adding spring-boot dependency in your application
  • add Oauth2 maven dependency
  • setup OAuth2 configuration
    • set up the audience
    • set up the issuer-url
  • add validator implements the OAuth2TokenValidator
  • configure api permission

Tips:

• If this occurs to you:

  {"error":"access_denied","error_description":"Client is not authorized to access \"https://quickstarts/api\". You need to create a \"client-grant\" associated to this API. See: https://auth0.com/docs/api/v2#!/Client_Grants/post_client_grants"}%

• solution
  • api should authorize the newly app.
    

more details about how to use auth0 in spring-boot

code source