oauth2-sso | 基于Spring Boot Spring Security OAuth2 jwt 搭建的单点登录示例 | Authentication library
kandi X-RAY | oauth2-sso Summary
kandi X-RAY | oauth2-sso Summary
基于Spring Boot + Spring Security OAuth2 + jwt 搭建的单点登录示例
Support
Quality
Security
License
Reuse
Top functions reviewed by kandi - BETA
- Configure Http Security .
- Gets a post message .
- cloud dump filter
- Bean template for OAuth2 REST template .
- The main application .
oauth2-sso Key Features
oauth2-sso Examples and Code Snippets
Community Discussions
Trending Discussions on oauth2-sso
QUESTION
I'm running an instance of the Kerby (MIT Kerberos Java implementation) on a Linux machine. I have a web application running on a Windows machine. The web application is secured using Spring Security Kerberos (following the steps described in this article).
Per the Kerberos protocol description for client authentication on wikipedia, step 1 is
- The client sends a cleartext message of the user ID to the AS (Authentication Server) requesting services on behalf of the user.
The client (in my case) is a web browser. How does the web browser know where the Authentication Server is? I don't see any mention of that in the article or in its referenced code. Is it part of the keytab that is exported from the KDC for the service principal name (SPN)?
...ANSWER
Answered 2021-Oct-19 at 08:02Spring Security Keberos uses SPNEGO protocol to get the service token (see section 3 in the referenced article). It 'instructs' the user-agent to get the service token. The user-agent will then use the OS libs to retrieve it. The OS knows where the KDC is located (*nix krb5.conf, Windows domain/AD membership). A keytab can be used to authenticate a client to the KDC, Spring Security Keberos docs. It seems that Spring is leveraging the krb5.conf file of the OS as it does not allow to specify the KDC. You should always first set up the OS Kerberos client on the host where your web app is deployed and test authentication using the keytab file via kinit
Community Discussions, Code Snippets contain sources that include Stack Exchange Network
Vulnerabilities
No vulnerabilities reported
Install oauth2-sso
You can use oauth2-sso like any standard Java library. Please include the the jar files in your classpath. You can also use any IDE and you can run and debug the oauth2-sso component as you would do with any other Java program. Best practice is to use a build tool that supports dependency management such as Maven or Gradle. For Maven installation, please refer maven.apache.org. For Gradle installation, please refer gradle.org .
Support
Reuse Trending Solutions
Find, review, and download reusable Libraries, Code Snippets, Cloud APIs from over 650 million Knowledge Items
Find more librariesStay Updated
Subscribe to our newsletter for trending solutions and developer bootcamps
Share this Page