Questions tagged [spring-boot-starter-security]

23 questions
4
votes
1 answer

How to configure OAuth2ResourceServer and OAuth2Client in the same application?

My application consists of an Angular UI, and a Spring backend. Both are bundled together and deployed on the same server. I am new to Spring Security/Oauth2, I find it very confusing. I want will be exposing a few APIs which could be consumed…
3
votes
1 answer

Error running springboot oauth2 application: java.security.PrivilegedActionException: null

I am new to spring security. I am trying to create a security application basing on the tutorial available in internet. pom.xml org.springframework.boot
3
votes
0 answers

JWT Token not processed in backend Spring security

First of all, I am trying to learn Spring security and may be my question is näive. I am trying to send a JWT Token from react UI to backend spring boot security and it is not working. However, I could test the same in postman and it works very…
user2179627
  • 367
  • 1
  • 4
  • 15
1
vote
0 answers

Integer Overflow or Wraparound vulnerability with medium severity found

I am trying to build a spring security with basic authentication. I use org.springframework.boot spring-boot-starter-security
1
vote
0 answers

Create authorization header in oath1 with signature Method HMAC-SHA256, consumer key and consumer Secret only

I want to create below Authorization header with signature Method HMAC-SHA256, consumer key and consumer Secret only for oAuth1 security. I tried multiple ways but wasn't able to get the correct value. Please help me. I am trying to create…
1
vote
2 answers

Unable to access page in spring security with 401

I am trying use basic spring security with normal user and admin feature. I am following this article. but I am kept on getting 401 unauthorize error, I tried with postman as well as curl command but no help. below is my spring config file. package…
LowCool
  • 1,187
  • 5
  • 25
  • 51
1
vote
1 answer

Error creating bean with name 'springSecurityFilterChain' defined in class path resource

I am new to Spring Security. I am using okta OIDC application to secure my Resource Server. I have the following application.yml okta: oauth2: client-id: {client-id} issuer: https://{okta-domain}.okta.com I have the following security…
1
vote
1 answer

Implement oauth2 authorization server without using Spring Security OAuth

My requirement is to implement oauth 2 using spring boot. It's for dynamic client registration(client id ,client secret ….) to be stored in the database, not in memory. The first option I see is using spring-security-oauth2. But as per…
0
votes
0 answers

Getting 401 Unauthorized for every Rest Api Call despite having valid token

I am using spring security and oauth2 to make my rest api secure. I can get the access token successfully. But I am getting 401 Unauthorized for every Rest Api Call despite having valid token. Any help would be greatly appreciated. My tech stack…
0
votes
0 answers

Which spring-boot-starter-security supports @EnableWebSecurity and @Preauthorize annotation?

I need version of spring-boot-starter-security supports @EnableWebSecurity and @Preauthorize annotation?
0
votes
1 answer

HttpSecurity and Spring Boot 3.0 incompatibility

I switched Spring Boot version from 2.5.2 to 3.0.2 and did some refactors. But stuck in this problem. HttpSecurity addFilter() method requires javax.servlet.Filter, but Spring Boot 3.0 uses jakarta. How to solve this? The codes are from a Youtube…
0
votes
0 answers

delete-ajax don't work when i add spring boot starter security

i add spring boot starter security to my project but when i tried use a function named delete ajax nothing work . it work normally without spring boot starter security. i need that option work this ajax function function deleteClient(cin) { …
0
votes
1 answer

Spring Boot AzureAD see if User is enabled/disabled without the user beeing currently authenticated

I have a Spring Boot App with AzureAD Authentication. This App generates a Username and Password for another page which can't have SSO (only htaccess). When I generate the Credentials for an authenticated user I want to recheck every 24 hours if the…
0
votes
1 answer

Error creating bean with name 'entityManagerFactory....' Although I defined you correctly my db with my entity class

i dont understood why i get this error. org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'entityManagerFactory' defined in class path resource…
0
votes
0 answers

Springboot Webflux+Security Custom implementation calling ReactiveAuthenticationManager authenticate method twice

I have a springboot webflux project with reactive security enabled For some reason the project seems to be calling the authenticate method of ReactiveAuthenticationManager twice (once in the default handler and once the request reaches the…
1
2