oauth2-client | 基于spring boot2 Oauth2 Client sso 单点登录 | OAuth library

I am currently working on a Spring Project, which I am new to, and have no idea why this dependency I got from the maven repository will now resolve itself. I have tried to use both the separated dependency (jjwt-api, etc..) and the one pasted in my pom.xml below but it will not resolve. If anyone can help me figure this out that would great appreciated.

Spring v2.6.4 Java JDK 17 Error message: Dependency 'com.auth0:java-jwt:3.18.3' not found

I have a Spring Boot (2.5) application in which I need to make a REST call to a remote system (a Solr instance where I store a denormalized view), in which I can either create or update records.

I don't really care about the response I get (and sometimes the remote system is slow to respond), so I am making an async call like this in createIndexForTicket / updateIndexForTicket :

I need to get a UserDetails in servlet filter. So I'm getting it from SecurityContextHolder.getContext().getAuthentication() like this -

I have a super simple Spring Boot app with Spring Security 5 that authenticates over OAuth2 with a Keycloak 17 instance running in Docker.

Everything works fine when I start the app locally from Intellij.

But when I run the app from a Docker container with docker-compose I get:

[invalid_token_response] An error occurred while attempting to retrieve the OAuth 2.0 Access Token Response: I/O error on POST request for "http://localhost:80/realms/Demo/protocol/openid-connect/token": Connection refused (Connection refused); nested exception is java.net.ConnectException: Connection refused (Connection refused)

when I input the credentials on the keycloak login page. But there is a session created for that user in keycloak.

System:

• MacBook with Monteray 12.0.1
• Docker Desktop 4.5 with Kubernetes 1.22.5

docker-compose.yml

I am developing a client application for client_credentials grant type flow in OAUTH2.

I am not able to decide on which dependency to use in my project for this purpose among the following.

1. spring-boot-starter-oauth2-client
2. spring-cloud-starter-oauth2
3. spring-security-oauth2

I referred this documentation from spring-projects in which under client-support section it had a table describing the available options. But I am not able to understand which column is referring to which of the above dependencies.

I want to configure a WebClient or RestTemplate which retrieves the OAUTH2 token from the auth-server automatically before accessing a resource-server.

Please guide me in choosing the right artifact for my project.

Sorry if this is off-topic but I haven't been able to find any information on it anywhere else. I'm trying to create an application registration that will allow a batch process to access the Azure REST API on my behalf.

Normally, this is pretty simple: just create the user, give it API permissions to what you need, add a secret and then insert the tenant ID, application ID and secret into a request against the /token endpoint, as described here.

I have done that and gotten the access token but, when I try to get all the billing accounts associated with the enterprise agreement, by calling https://management.azure.com/providers/Microsoft.Billing/billingAccounts?api-version=2020-05-01 I get no information back. Also, when I try to access a particular billing account back, by calling https://management.azure.com/providers/Microsoft.Billing/billingAccounts/{account_id}?api-version=2020-05-01, I get the following error and a 403 response code:

I have created my authorization server using org.springframework.security:spring-security-oauth2-authorization-server:0.2.2 and my client using org.springframework.boot:spring-boot-starter-oauth2-client. The users are able to sign in and out successfully, however, while testing I noticed that if I log in successfully then restart the client (but not the server) without signing out and try to login in again the server throws the following error in an endless loop of redirects

I'm trying to set up security for Webflux with OAuth2 to use it as a gateway. On the other hand I have my own Authorization Server. We can say that this is the structure I want to achieve:

The configuration is as follows:

WebFluxSecurityConfig.java

i am using the following depdendencies