Secured spring request handler with Apikey and user roles using spring lemon

Question

Can I be enriched with some code snippets for securing certain request handlers with user roles and apikey using spring lemon please.

Answer 1

How to use API key to authenticate is actually a different question from how to have role based authorizations, because whether you use API key or username/password for authentication, the authorization pattern is going to be the same. For authorization, Spring Lemon uses service method level authorization. Look at the use of @PreAuthorize and @UserEditPermission in LemonService as examples.

For creating and using API key, have a look at the API documentation and let me know if you have any specific questions. BTW, the getting started video tutorial showcases creating the API key.