├── .DS_Store
├── .gitignore
├── .mvn
└── wrapper
│ ├── maven-wrapper.jar
│ └── maven-wrapper.properties
├── README.md
├── mvnw
├── mvnw.cmd
├── pom.xml
└── src
├── main
├── java
│ └── com
│ │ └── truongbn
│ │ └── security
│ │ ├── SecurityApplication.java
│ │ ├── config
│ │ ├── JwtAuthenticationFilter.java
│ │ └── SecurityConfiguration.java
│ │ ├── controller
│ │ ├── AuthenticationController.java
│ │ └── AuthorizationController.java
│ │ ├── dao
│ │ ├── request
│ │ │ ├── SignUpRequest.java
│ │ │ └── SigninRequest.java
│ │ └── response
│ │ │ └── JwtAuthenticationResponse.java
│ │ ├── entities
│ │ ├── Role.java
│ │ └── User.java
│ │ ├── repository
│ │ └── UserRepository.java
│ │ └── service
│ │ ├── AuthenticationService.java
│ │ ├── JwtService.java
│ │ ├── UserService.java
│ │ └── impl
│ │ ├── AuthenticationServiceImpl.java
│ │ ├── JwtServiceImpl.java
│ │ └── UserServiceImpl.java
└── resources
│ └── application.yaml
└── test
└── java
└── com
└── truongbn
└── security
└── SecurityApplicationTests.java
/.DS_Store:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/buingoctruong/springboot3-springsecurity6-jwt/7177fffdbf11d5ab4b3a88518b53ea68270ebee6/.DS_Store
--------------------------------------------------------------------------------
/.gitignore:
--------------------------------------------------------------------------------
1 | HELP.md
2 | target/
3 | !.mvn/wrapper/maven-wrapper.jar
4 | !**/src/main/**/target/
5 | !**/src/test/**/target/
6 |
7 | ### STS ###
8 | .apt_generated
9 | .classpath
10 | .factorypath
11 | .project
12 | .settings
13 | .springBeans
14 | .sts4-cache
15 |
16 | ### IntelliJ IDEA ###
17 | .idea
18 | *.iws
19 | *.iml
20 | *.ipr
21 |
22 | ### NetBeans ###
23 | /nbproject/private/
24 | /nbbuild/
25 | /dist/
26 | /nbdist/
27 | /.nb-gradle/
28 | build/
29 | !**/src/main/**/build/
30 | !**/src/test/**/build/
31 |
32 | ### VS Code ###
33 | .vscode/
34 |
--------------------------------------------------------------------------------
/.mvn/wrapper/maven-wrapper.jar:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/buingoctruong/springboot3-springsecurity6-jwt/7177fffdbf11d5ab4b3a88518b53ea68270ebee6/.mvn/wrapper/maven-wrapper.jar
--------------------------------------------------------------------------------
/.mvn/wrapper/maven-wrapper.properties:
--------------------------------------------------------------------------------
1 | # Licensed to the Apache Software Foundation (ASF) under one
2 | # or more contributor license agreements. See the NOTICE file
3 | # distributed with this work for additional information
4 | # regarding copyright ownership. The ASF licenses this file
5 | # to you under the Apache License, Version 2.0 (the
6 | # "License"); you may not use this file except in compliance
7 | # with the License. You may obtain a copy of the License at
8 | #
9 | # https://www.apache.org/licenses/LICENSE-2.0
10 | #
11 | # Unless required by applicable law or agreed to in writing,
12 | # software distributed under the License is distributed on an
13 | # "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
14 | # KIND, either express or implied. See the License for the
15 | # specific language governing permissions and limitations
16 | # under the License.
17 | distributionUrl=https://repo.maven.apache.org/maven2/org/apache/maven/apache-maven/3.9.1/apache-maven-3.9.1-bin.zip
18 | wrapperUrl=https://repo.maven.apache.org/maven2/org/apache/maven/wrapper/maven-wrapper/3.2.0/maven-wrapper-3.2.0.jar
19 |
--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
1 | # JWT Authentication and Authorization with Spring Boot 3 and Spring Security 6
2 |
3 | Medium
4 | Article: https://medium.com/@truongbui95/jwt-authentication-and-authorization-with-spring-boot-3-and-spring-security-6-2f90f9337421
5 |
--------------------------------------------------------------------------------
/mvnw:
--------------------------------------------------------------------------------
1 | #!/bin/sh
2 | # ----------------------------------------------------------------------------
3 | # Licensed to the Apache Software Foundation (ASF) under one
4 | # or more contributor license agreements. See the NOTICE file
5 | # distributed with this work for additional information
6 | # regarding copyright ownership. The ASF licenses this file
7 | # to you under the Apache License, Version 2.0 (the
8 | # "License"); you may not use this file except in compliance
9 | # with the License. You may obtain a copy of the License at
10 | #
11 | # https://www.apache.org/licenses/LICENSE-2.0
12 | #
13 | # Unless required by applicable law or agreed to in writing,
14 | # software distributed under the License is distributed on an
15 | # "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
16 | # KIND, either express or implied. See the License for the
17 | # specific language governing permissions and limitations
18 | # under the License.
19 | # ----------------------------------------------------------------------------
20 |
21 | # ----------------------------------------------------------------------------
22 | # Apache Maven Wrapper startup batch script, version 3.2.0
23 | #
24 | # Required ENV vars:
25 | # ------------------
26 | # JAVA_HOME - location of a JDK home dir
27 | #
28 | # Optional ENV vars
29 | # -----------------
30 | # MAVEN_OPTS - parameters passed to the Java VM when running Maven
31 | # e.g. to debug Maven itself, use
32 | # set MAVEN_OPTS=-Xdebug -Xrunjdwp:transport=dt_socket,server=y,suspend=y,address=8000
33 | # MAVEN_SKIP_RC - flag to disable loading of mavenrc files
34 | # ----------------------------------------------------------------------------
35 |
36 | if [ -z "$MAVEN_SKIP_RC" ] ; then
37 |
38 | if [ -f /usr/local/etc/mavenrc ] ; then
39 | . /usr/local/etc/mavenrc
40 | fi
41 |
42 | if [ -f /etc/mavenrc ] ; then
43 | . /etc/mavenrc
44 | fi
45 |
46 | if [ -f "$HOME/.mavenrc" ] ; then
47 | . "$HOME/.mavenrc"
48 | fi
49 |
50 | fi
51 |
52 | # OS specific support. $var _must_ be set to either true or false.
53 | cygwin=false;
54 | darwin=false;
55 | mingw=false
56 | case "$(uname)" in
57 | CYGWIN*) cygwin=true ;;
58 | MINGW*) mingw=true;;
59 | Darwin*) darwin=true
60 | # Use /usr/libexec/java_home if available, otherwise fall back to /Library/Java/Home
61 | # See https://developer.apple.com/library/mac/qa/qa1170/_index.html
62 | if [ -z "$JAVA_HOME" ]; then
63 | if [ -x "/usr/libexec/java_home" ]; then
64 | JAVA_HOME="$(/usr/libexec/java_home)"; export JAVA_HOME
65 | else
66 | JAVA_HOME="/Library/Java/Home"; export JAVA_HOME
67 | fi
68 | fi
69 | ;;
70 | esac
71 |
72 | if [ -z "$JAVA_HOME" ] ; then
73 | if [ -r /etc/gentoo-release ] ; then
74 | JAVA_HOME=$(java-config --jre-home)
75 | fi
76 | fi
77 |
78 | # For Cygwin, ensure paths are in UNIX format before anything is touched
79 | if $cygwin ; then
80 | [ -n "$JAVA_HOME" ] &&
81 | JAVA_HOME=$(cygpath --unix "$JAVA_HOME")
82 | [ -n "$CLASSPATH" ] &&
83 | CLASSPATH=$(cygpath --path --unix "$CLASSPATH")
84 | fi
85 |
86 | # For Mingw, ensure paths are in UNIX format before anything is touched
87 | if $mingw ; then
88 | [ -n "$JAVA_HOME" ] && [ -d "$JAVA_HOME" ] &&
89 | JAVA_HOME="$(cd "$JAVA_HOME" || (echo "cannot cd into $JAVA_HOME."; exit 1); pwd)"
90 | fi
91 |
92 | if [ -z "$JAVA_HOME" ]; then
93 | javaExecutable="$(which javac)"
94 | if [ -n "$javaExecutable" ] && ! [ "$(expr "\"$javaExecutable\"" : '\([^ ]*\)')" = "no" ]; then
95 | # readlink(1) is not available as standard on Solaris 10.
96 | readLink=$(which readlink)
97 | if [ ! "$(expr "$readLink" : '\([^ ]*\)')" = "no" ]; then
98 | if $darwin ; then
99 | javaHome="$(dirname "\"$javaExecutable\"")"
100 | javaExecutable="$(cd "\"$javaHome\"" && pwd -P)/javac"
101 | else
102 | javaExecutable="$(readlink -f "\"$javaExecutable\"")"
103 | fi
104 | javaHome="$(dirname "\"$javaExecutable\"")"
105 | javaHome=$(expr "$javaHome" : '\(.*\)/bin')
106 | JAVA_HOME="$javaHome"
107 | export JAVA_HOME
108 | fi
109 | fi
110 | fi
111 |
112 | if [ -z "$JAVACMD" ] ; then
113 | if [ -n "$JAVA_HOME" ] ; then
114 | if [ -x "$JAVA_HOME/jre/sh/java" ] ; then
115 | # IBM's JDK on AIX uses strange locations for the executables
116 | JAVACMD="$JAVA_HOME/jre/sh/java"
117 | else
118 | JAVACMD="$JAVA_HOME/bin/java"
119 | fi
120 | else
121 | JAVACMD="$(\unset -f command 2>/dev/null; \command -v java)"
122 | fi
123 | fi
124 |
125 | if [ ! -x "$JAVACMD" ] ; then
126 | echo "Error: JAVA_HOME is not defined correctly." >&2
127 | echo " We cannot execute $JAVACMD" >&2
128 | exit 1
129 | fi
130 |
131 | if [ -z "$JAVA_HOME" ] ; then
132 | echo "Warning: JAVA_HOME environment variable is not set."
133 | fi
134 |
135 | # traverses directory structure from process work directory to filesystem root
136 | # first directory with .mvn subdirectory is considered project base directory
137 | find_maven_basedir() {
138 | if [ -z "$1" ]
139 | then
140 | echo "Path not specified to find_maven_basedir"
141 | return 1
142 | fi
143 |
144 | basedir="$1"
145 | wdir="$1"
146 | while [ "$wdir" != '/' ] ; do
147 | if [ -d "$wdir"/.mvn ] ; then
148 | basedir=$wdir
149 | break
150 | fi
151 | # workaround for JBEAP-8937 (on Solaris 10/Sparc)
152 | if [ -d "${wdir}" ]; then
153 | wdir=$(cd "$wdir/.." || exit 1; pwd)
154 | fi
155 | # end of workaround
156 | done
157 | printf '%s' "$(cd "$basedir" || exit 1; pwd)"
158 | }
159 |
160 | # concatenates all lines of a file
161 | concat_lines() {
162 | if [ -f "$1" ]; then
163 | # Remove \r in case we run on Windows within Git Bash
164 | # and check out the repository with auto CRLF management
165 | # enabled. Otherwise, we may read lines that are delimited with
166 | # \r\n and produce $'-Xarg\r' rather than -Xarg due to word
167 | # splitting rules.
168 | tr -s '\r\n' ' ' < "$1"
169 | fi
170 | }
171 |
172 | log() {
173 | if [ "$MVNW_VERBOSE" = true ]; then
174 | printf '%s\n' "$1"
175 | fi
176 | }
177 |
178 | BASE_DIR=$(find_maven_basedir "$(dirname "$0")")
179 | if [ -z "$BASE_DIR" ]; then
180 | exit 1;
181 | fi
182 |
183 | MAVEN_PROJECTBASEDIR=${MAVEN_BASEDIR:-"$BASE_DIR"}; export MAVEN_PROJECTBASEDIR
184 | log "$MAVEN_PROJECTBASEDIR"
185 |
186 | ##########################################################################################
187 | # Extension to allow automatically downloading the maven-wrapper.jar from Maven-central
188 | # This allows using the maven wrapper in projects that prohibit checking in binary data.
189 | ##########################################################################################
190 | wrapperJarPath="$MAVEN_PROJECTBASEDIR/.mvn/wrapper/maven-wrapper.jar"
191 | if [ -r "$wrapperJarPath" ]; then
192 | log "Found $wrapperJarPath"
193 | else
194 | log "Couldn't find $wrapperJarPath, downloading it ..."
195 |
196 | if [ -n "$MVNW_REPOURL" ]; then
197 | wrapperUrl="$MVNW_REPOURL/org/apache/maven/wrapper/maven-wrapper/3.2.0/maven-wrapper-3.2.0.jar"
198 | else
199 | wrapperUrl="https://repo.maven.apache.org/maven2/org/apache/maven/wrapper/maven-wrapper/3.2.0/maven-wrapper-3.2.0.jar"
200 | fi
201 | while IFS="=" read -r key value; do
202 | # Remove '\r' from value to allow usage on windows as IFS does not consider '\r' as a separator ( considers space, tab, new line ('\n'), and custom '=' )
203 | safeValue=$(echo "$value" | tr -d '\r')
204 | case "$key" in (wrapperUrl) wrapperUrl="$safeValue"; break ;;
205 | esac
206 | done < "$MAVEN_PROJECTBASEDIR/.mvn/wrapper/maven-wrapper.properties"
207 | log "Downloading from: $wrapperUrl"
208 |
209 | if $cygwin; then
210 | wrapperJarPath=$(cygpath --path --windows "$wrapperJarPath")
211 | fi
212 |
213 | if command -v wget > /dev/null; then
214 | log "Found wget ... using wget"
215 | [ "$MVNW_VERBOSE" = true ] && QUIET="" || QUIET="--quiet"
216 | if [ -z "$MVNW_USERNAME" ] || [ -z "$MVNW_PASSWORD" ]; then
217 | wget $QUIET "$wrapperUrl" -O "$wrapperJarPath" || rm -f "$wrapperJarPath"
218 | else
219 | wget $QUIET --http-user="$MVNW_USERNAME" --http-password="$MVNW_PASSWORD" "$wrapperUrl" -O "$wrapperJarPath" || rm -f "$wrapperJarPath"
220 | fi
221 | elif command -v curl > /dev/null; then
222 | log "Found curl ... using curl"
223 | [ "$MVNW_VERBOSE" = true ] && QUIET="" || QUIET="--silent"
224 | if [ -z "$MVNW_USERNAME" ] || [ -z "$MVNW_PASSWORD" ]; then
225 | curl $QUIET -o "$wrapperJarPath" "$wrapperUrl" -f -L || rm -f "$wrapperJarPath"
226 | else
227 | curl $QUIET --user "$MVNW_USERNAME:$MVNW_PASSWORD" -o "$wrapperJarPath" "$wrapperUrl" -f -L || rm -f "$wrapperJarPath"
228 | fi
229 | else
230 | log "Falling back to using Java to download"
231 | javaSource="$MAVEN_PROJECTBASEDIR/.mvn/wrapper/MavenWrapperDownloader.java"
232 | javaClass="$MAVEN_PROJECTBASEDIR/.mvn/wrapper/MavenWrapperDownloader.class"
233 | # For Cygwin, switch paths to Windows format before running javac
234 | if $cygwin; then
235 | javaSource=$(cygpath --path --windows "$javaSource")
236 | javaClass=$(cygpath --path --windows "$javaClass")
237 | fi
238 | if [ -e "$javaSource" ]; then
239 | if [ ! -e "$javaClass" ]; then
240 | log " - Compiling MavenWrapperDownloader.java ..."
241 | ("$JAVA_HOME/bin/javac" "$javaSource")
242 | fi
243 | if [ -e "$javaClass" ]; then
244 | log " - Running MavenWrapperDownloader.java ..."
245 | ("$JAVA_HOME/bin/java" -cp .mvn/wrapper MavenWrapperDownloader "$wrapperUrl" "$wrapperJarPath") || rm -f "$wrapperJarPath"
246 | fi
247 | fi
248 | fi
249 | fi
250 | ##########################################################################################
251 | # End of extension
252 | ##########################################################################################
253 |
254 | # If specified, validate the SHA-256 sum of the Maven wrapper jar file
255 | wrapperSha256Sum=""
256 | while IFS="=" read -r key value; do
257 | case "$key" in (wrapperSha256Sum) wrapperSha256Sum=$value; break ;;
258 | esac
259 | done < "$MAVEN_PROJECTBASEDIR/.mvn/wrapper/maven-wrapper.properties"
260 | if [ -n "$wrapperSha256Sum" ]; then
261 | wrapperSha256Result=false
262 | if command -v sha256sum > /dev/null; then
263 | if echo "$wrapperSha256Sum $wrapperJarPath" | sha256sum -c > /dev/null 2>&1; then
264 | wrapperSha256Result=true
265 | fi
266 | elif command -v shasum > /dev/null; then
267 | if echo "$wrapperSha256Sum $wrapperJarPath" | shasum -a 256 -c > /dev/null 2>&1; then
268 | wrapperSha256Result=true
269 | fi
270 | else
271 | echo "Checksum validation was requested but neither 'sha256sum' or 'shasum' are available."
272 | echo "Please install either command, or disable validation by removing 'wrapperSha256Sum' from your maven-wrapper.properties."
273 | exit 1
274 | fi
275 | if [ $wrapperSha256Result = false ]; then
276 | echo "Error: Failed to validate Maven wrapper SHA-256, your Maven wrapper might be compromised." >&2
277 | echo "Investigate or delete $wrapperJarPath to attempt a clean download." >&2
278 | echo "If you updated your Maven version, you need to update the specified wrapperSha256Sum property." >&2
279 | exit 1
280 | fi
281 | fi
282 |
283 | MAVEN_OPTS="$(concat_lines "$MAVEN_PROJECTBASEDIR/.mvn/jvm.config") $MAVEN_OPTS"
284 |
285 | # For Cygwin, switch paths to Windows format before running java
286 | if $cygwin; then
287 | [ -n "$JAVA_HOME" ] &&
288 | JAVA_HOME=$(cygpath --path --windows "$JAVA_HOME")
289 | [ -n "$CLASSPATH" ] &&
290 | CLASSPATH=$(cygpath --path --windows "$CLASSPATH")
291 | [ -n "$MAVEN_PROJECTBASEDIR" ] &&
292 | MAVEN_PROJECTBASEDIR=$(cygpath --path --windows "$MAVEN_PROJECTBASEDIR")
293 | fi
294 |
295 | # Provide a "standardized" way to retrieve the CLI args that will
296 | # work with both Windows and non-Windows executions.
297 | MAVEN_CMD_LINE_ARGS="$MAVEN_CONFIG $*"
298 | export MAVEN_CMD_LINE_ARGS
299 |
300 | WRAPPER_LAUNCHER=org.apache.maven.wrapper.MavenWrapperMain
301 |
302 | # shellcheck disable=SC2086 # safe args
303 | exec "$JAVACMD" \
304 | $MAVEN_OPTS \
305 | $MAVEN_DEBUG_OPTS \
306 | -classpath "$MAVEN_PROJECTBASEDIR/.mvn/wrapper/maven-wrapper.jar" \
307 | "-Dmaven.multiModuleProjectDirectory=${MAVEN_PROJECTBASEDIR}" \
308 | ${WRAPPER_LAUNCHER} $MAVEN_CONFIG "$@"
309 |
--------------------------------------------------------------------------------
/mvnw.cmd:
--------------------------------------------------------------------------------
1 | @REM ----------------------------------------------------------------------------
2 | @REM Licensed to the Apache Software Foundation (ASF) under one
3 | @REM or more contributor license agreements. See the NOTICE file
4 | @REM distributed with this work for additional information
5 | @REM regarding copyright ownership. The ASF licenses this file
6 | @REM to you under the Apache License, Version 2.0 (the
7 | @REM "License"); you may not use this file except in compliance
8 | @REM with the License. You may obtain a copy of the License at
9 | @REM
10 | @REM https://www.apache.org/licenses/LICENSE-2.0
11 | @REM
12 | @REM Unless required by applicable law or agreed to in writing,
13 | @REM software distributed under the License is distributed on an
14 | @REM "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
15 | @REM KIND, either express or implied. See the License for the
16 | @REM specific language governing permissions and limitations
17 | @REM under the License.
18 | @REM ----------------------------------------------------------------------------
19 |
20 | @REM ----------------------------------------------------------------------------
21 | @REM Apache Maven Wrapper startup batch script, version 3.2.0
22 | @REM
23 | @REM Required ENV vars:
24 | @REM JAVA_HOME - location of a JDK home dir
25 | @REM
26 | @REM Optional ENV vars
27 | @REM MAVEN_BATCH_ECHO - set to 'on' to enable the echoing of the batch commands
28 | @REM MAVEN_BATCH_PAUSE - set to 'on' to wait for a keystroke before ending
29 | @REM MAVEN_OPTS - parameters passed to the Java VM when running Maven
30 | @REM e.g. to debug Maven itself, use
31 | @REM set MAVEN_OPTS=-Xdebug -Xrunjdwp:transport=dt_socket,server=y,suspend=y,address=8000
32 | @REM MAVEN_SKIP_RC - flag to disable loading of mavenrc files
33 | @REM ----------------------------------------------------------------------------
34 |
35 | @REM Begin all REM lines with '@' in case MAVEN_BATCH_ECHO is 'on'
36 | @echo off
37 | @REM set title of command window
38 | title %0
39 | @REM enable echoing by setting MAVEN_BATCH_ECHO to 'on'
40 | @if "%MAVEN_BATCH_ECHO%" == "on" echo %MAVEN_BATCH_ECHO%
41 |
42 | @REM set %HOME% to equivalent of $HOME
43 | if "%HOME%" == "" (set "HOME=%HOMEDRIVE%%HOMEPATH%")
44 |
45 | @REM Execute a user defined script before this one
46 | if not "%MAVEN_SKIP_RC%" == "" goto skipRcPre
47 | @REM check for pre script, once with legacy .bat ending and once with .cmd ending
48 | if exist "%USERPROFILE%\mavenrc_pre.bat" call "%USERPROFILE%\mavenrc_pre.bat" %*
49 | if exist "%USERPROFILE%\mavenrc_pre.cmd" call "%USERPROFILE%\mavenrc_pre.cmd" %*
50 | :skipRcPre
51 |
52 | @setlocal
53 |
54 | set ERROR_CODE=0
55 |
56 | @REM To isolate internal variables from possible post scripts, we use another setlocal
57 | @setlocal
58 |
59 | @REM ==== START VALIDATION ====
60 | if not "%JAVA_HOME%" == "" goto OkJHome
61 |
62 | echo.
63 | echo Error: JAVA_HOME not found in your environment. >&2
64 | echo Please set the JAVA_HOME variable in your environment to match the >&2
65 | echo location of your Java installation. >&2
66 | echo.
67 | goto error
68 |
69 | :OkJHome
70 | if exist "%JAVA_HOME%\bin\java.exe" goto init
71 |
72 | echo.
73 | echo Error: JAVA_HOME is set to an invalid directory. >&2
74 | echo JAVA_HOME = "%JAVA_HOME%" >&2
75 | echo Please set the JAVA_HOME variable in your environment to match the >&2
76 | echo location of your Java installation. >&2
77 | echo.
78 | goto error
79 |
80 | @REM ==== END VALIDATION ====
81 |
82 | :init
83 |
84 | @REM Find the project base dir, i.e. the directory that contains the folder ".mvn".
85 | @REM Fallback to current working directory if not found.
86 |
87 | set MAVEN_PROJECTBASEDIR=%MAVEN_BASEDIR%
88 | IF NOT "%MAVEN_PROJECTBASEDIR%"=="" goto endDetectBaseDir
89 |
90 | set EXEC_DIR=%CD%
91 | set WDIR=%EXEC_DIR%
92 | :findBaseDir
93 | IF EXIST "%WDIR%"\.mvn goto baseDirFound
94 | cd ..
95 | IF "%WDIR%"=="%CD%" goto baseDirNotFound
96 | set WDIR=%CD%
97 | goto findBaseDir
98 |
99 | :baseDirFound
100 | set MAVEN_PROJECTBASEDIR=%WDIR%
101 | cd "%EXEC_DIR%"
102 | goto endDetectBaseDir
103 |
104 | :baseDirNotFound
105 | set MAVEN_PROJECTBASEDIR=%EXEC_DIR%
106 | cd "%EXEC_DIR%"
107 |
108 | :endDetectBaseDir
109 |
110 | IF NOT EXIST "%MAVEN_PROJECTBASEDIR%\.mvn\jvm.config" goto endReadAdditionalConfig
111 |
112 | @setlocal EnableExtensions EnableDelayedExpansion
113 | for /F "usebackq delims=" %%a in ("%MAVEN_PROJECTBASEDIR%\.mvn\jvm.config") do set JVM_CONFIG_MAVEN_PROPS=!JVM_CONFIG_MAVEN_PROPS! %%a
114 | @endlocal & set JVM_CONFIG_MAVEN_PROPS=%JVM_CONFIG_MAVEN_PROPS%
115 |
116 | :endReadAdditionalConfig
117 |
118 | SET MAVEN_JAVA_EXE="%JAVA_HOME%\bin\java.exe"
119 | set WRAPPER_JAR="%MAVEN_PROJECTBASEDIR%\.mvn\wrapper\maven-wrapper.jar"
120 | set WRAPPER_LAUNCHER=org.apache.maven.wrapper.MavenWrapperMain
121 |
122 | set WRAPPER_URL="https://repo.maven.apache.org/maven2/org/apache/maven/wrapper/maven-wrapper/3.2.0/maven-wrapper-3.2.0.jar"
123 |
124 | FOR /F "usebackq tokens=1,2 delims==" %%A IN ("%MAVEN_PROJECTBASEDIR%\.mvn\wrapper\maven-wrapper.properties") DO (
125 | IF "%%A"=="wrapperUrl" SET WRAPPER_URL=%%B
126 | )
127 |
128 | @REM Extension to allow automatically downloading the maven-wrapper.jar from Maven-central
129 | @REM This allows using the maven wrapper in projects that prohibit checking in binary data.
130 | if exist %WRAPPER_JAR% (
131 | if "%MVNW_VERBOSE%" == "true" (
132 | echo Found %WRAPPER_JAR%
133 | )
134 | ) else (
135 | if not "%MVNW_REPOURL%" == "" (
136 | SET WRAPPER_URL="%MVNW_REPOURL%/org/apache/maven/wrapper/maven-wrapper/3.2.0/maven-wrapper-3.2.0.jar"
137 | )
138 | if "%MVNW_VERBOSE%" == "true" (
139 | echo Couldn't find %WRAPPER_JAR%, downloading it ...
140 | echo Downloading from: %WRAPPER_URL%
141 | )
142 |
143 | powershell -Command "&{"^
144 | "$webclient = new-object System.Net.WebClient;"^
145 | "if (-not ([string]::IsNullOrEmpty('%MVNW_USERNAME%') -and [string]::IsNullOrEmpty('%MVNW_PASSWORD%'))) {"^
146 | "$webclient.Credentials = new-object System.Net.NetworkCredential('%MVNW_USERNAME%', '%MVNW_PASSWORD%');"^
147 | "}"^
148 | "[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; $webclient.DownloadFile('%WRAPPER_URL%', '%WRAPPER_JAR%')"^
149 | "}"
150 | if "%MVNW_VERBOSE%" == "true" (
151 | echo Finished downloading %WRAPPER_JAR%
152 | )
153 | )
154 | @REM End of extension
155 |
156 | @REM If specified, validate the SHA-256 sum of the Maven wrapper jar file
157 | SET WRAPPER_SHA_256_SUM=""
158 | FOR /F "usebackq tokens=1,2 delims==" %%A IN ("%MAVEN_PROJECTBASEDIR%\.mvn\wrapper\maven-wrapper.properties") DO (
159 | IF "%%A"=="wrapperSha256Sum" SET WRAPPER_SHA_256_SUM=%%B
160 | )
161 | IF NOT %WRAPPER_SHA_256_SUM%=="" (
162 | powershell -Command "&{"^
163 | "$hash = (Get-FileHash \"%WRAPPER_JAR%\" -Algorithm SHA256).Hash.ToLower();"^
164 | "If('%WRAPPER_SHA_256_SUM%' -ne $hash){"^
165 | " Write-Output 'Error: Failed to validate Maven wrapper SHA-256, your Maven wrapper might be compromised.';"^
166 | " Write-Output 'Investigate or delete %WRAPPER_JAR% to attempt a clean download.';"^
167 | " Write-Output 'If you updated your Maven version, you need to update the specified wrapperSha256Sum property.';"^
168 | " exit 1;"^
169 | "}"^
170 | "}"
171 | if ERRORLEVEL 1 goto error
172 | )
173 |
174 | @REM Provide a "standardized" way to retrieve the CLI args that will
175 | @REM work with both Windows and non-Windows executions.
176 | set MAVEN_CMD_LINE_ARGS=%*
177 |
178 | %MAVEN_JAVA_EXE% ^
179 | %JVM_CONFIG_MAVEN_PROPS% ^
180 | %MAVEN_OPTS% ^
181 | %MAVEN_DEBUG_OPTS% ^
182 | -classpath %WRAPPER_JAR% ^
183 | "-Dmaven.multiModuleProjectDirectory=%MAVEN_PROJECTBASEDIR%" ^
184 | %WRAPPER_LAUNCHER% %MAVEN_CONFIG% %*
185 | if ERRORLEVEL 1 goto error
186 | goto end
187 |
188 | :error
189 | set ERROR_CODE=1
190 |
191 | :end
192 | @endlocal & set ERROR_CODE=%ERROR_CODE%
193 |
194 | if not "%MAVEN_SKIP_RC%"=="" goto skipRcPost
195 | @REM check for post script, once with legacy .bat ending and once with .cmd ending
196 | if exist "%USERPROFILE%\mavenrc_post.bat" call "%USERPROFILE%\mavenrc_post.bat"
197 | if exist "%USERPROFILE%\mavenrc_post.cmd" call "%USERPROFILE%\mavenrc_post.cmd"
198 | :skipRcPost
199 |
200 | @REM pause the script if MAVEN_BATCH_PAUSE is set to 'on'
201 | if "%MAVEN_BATCH_PAUSE%"=="on" pause
202 |
203 | if "%MAVEN_TERMINATE_CMD%"=="on" exit %ERROR_CODE%
204 |
205 | cmd /C exit /B %ERROR_CODE%
206 |
--------------------------------------------------------------------------------
/pom.xml:
--------------------------------------------------------------------------------
1 |
2 |
4 | 4.0.0
5 |
6 | org.springframework.boot
7 | spring-boot-starter-parent
8 | 3.1.0-RC1
9 |
10 |
11 | com.truongbn
12 | security
13 | 0.0.1-SNAPSHOT
14 | security
15 |
16 |
17 | 17
18 |
19 |
20 |
21 |
22 | org.springframework.boot
23 | spring-boot-starter-data-jpa
24 |
25 |
26 | org.springframework.boot
27 | spring-boot-starter-security
28 |
29 |
30 | org.springframework.boot
31 | spring-boot-starter-web
32 |
33 |
34 | com.h2database
35 | h2
36 | runtime
37 |
38 |
39 | org.apache.commons
40 | commons-lang3
41 |
42 |
43 | org.projectlombok
44 | lombok
45 | true
46 |
47 |
48 | io.jsonwebtoken
49 | jjwt-api
50 |
51 |
52 | io.jsonwebtoken
53 | jjwt-impl
54 |
55 |
56 | io.jsonwebtoken
57 | jjwt-jackson
58 |
59 |
60 | org.springframework.boot
61 | spring-boot-starter-test
62 | test
63 |
64 |
65 | org.springframework.security
66 | spring-security-test
67 | test
68 |
69 |
70 |
71 |
72 |
73 |
74 | io.jsonwebtoken
75 | jjwt-api
76 | 0.11.5
77 |
78 |
79 | io.jsonwebtoken
80 | jjwt-impl
81 | 0.11.5
82 |
83 |
84 | io.jsonwebtoken
85 | jjwt-jackson
86 | 0.11.5
87 |
88 |
89 |
90 |
91 |
92 |
93 |
94 | org.springframework.boot
95 | spring-boot-maven-plugin
96 |
97 |
98 |
99 | org.projectlombok
100 | lombok
101 |
102 |
103 |
104 |
105 |
106 |
107 |
108 |
109 | spring-milestones
110 | Spring Milestones
111 | https://repo.spring.io/milestone
112 |
113 | false
114 |
115 |
116 |
117 |
118 |
119 | spring-milestones
120 | Spring Milestones
121 | https://repo.spring.io/milestone
122 |
123 | false
124 |
125 |
126 |
127 |
128 |
129 |
--------------------------------------------------------------------------------
/src/main/java/com/truongbn/security/SecurityApplication.java:
--------------------------------------------------------------------------------
1 | package com.truongbn.security;
2 |
3 | import org.springframework.boot.SpringApplication;
4 | import org.springframework.boot.autoconfigure.SpringBootApplication;
5 |
6 | @SpringBootApplication
7 | public class SecurityApplication {
8 |
9 | public static void main(String[] args) {
10 | SpringApplication.run(SecurityApplication.class, args);
11 | }
12 |
13 | }
14 |
--------------------------------------------------------------------------------
/src/main/java/com/truongbn/security/config/JwtAuthenticationFilter.java:
--------------------------------------------------------------------------------
1 | package com.truongbn.security.config;
2 |
3 | import java.io.IOException;
4 |
5 | import org.apache.commons.lang3.StringUtils;
6 | import org.springframework.lang.NonNull;
7 | import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
8 | import org.springframework.security.core.context.SecurityContext;
9 | import org.springframework.security.core.context.SecurityContextHolder;
10 | import org.springframework.security.core.userdetails.UserDetails;
11 | import org.springframework.security.web.authentication.WebAuthenticationDetailsSource;
12 | import org.springframework.stereotype.Component;
13 | import org.springframework.web.filter.OncePerRequestFilter;
14 |
15 | import com.truongbn.security.service.JwtService;
16 | import com.truongbn.security.service.UserService;
17 |
18 | import jakarta.servlet.FilterChain;
19 | import jakarta.servlet.ServletException;
20 | import jakarta.servlet.http.HttpServletRequest;
21 | import jakarta.servlet.http.HttpServletResponse;
22 | import lombok.RequiredArgsConstructor;
23 |
24 | @Component
25 | @RequiredArgsConstructor
26 | public class JwtAuthenticationFilter extends OncePerRequestFilter {
27 | private final JwtService jwtService;
28 | private final UserService userService;
29 | @Override
30 | protected void doFilterInternal(@NonNull HttpServletRequest request,
31 | @NonNull HttpServletResponse response, @NonNull FilterChain filterChain)
32 | throws ServletException, IOException {
33 | final String authHeader = request.getHeader("Authorization");
34 | final String jwt;
35 | final String userEmail;
36 | if (StringUtils.isEmpty(authHeader) || !StringUtils.startsWith(authHeader, "Bearer ")) {
37 | filterChain.doFilter(request, response);
38 | return;
39 | }
40 | jwt = authHeader.substring(7);
41 | userEmail = jwtService.extractUserName(jwt);
42 | if (StringUtils.isNotEmpty(userEmail)
43 | && SecurityContextHolder.getContext().getAuthentication() == null) {
44 | UserDetails userDetails = userService.userDetailsService()
45 | .loadUserByUsername(userEmail);
46 | if (jwtService.isTokenValid(jwt, userDetails)) {
47 | SecurityContext context = SecurityContextHolder.createEmptyContext();
48 | UsernamePasswordAuthenticationToken authToken = new UsernamePasswordAuthenticationToken(
49 | userDetails, null, userDetails.getAuthorities());
50 | authToken.setDetails(new WebAuthenticationDetailsSource().buildDetails(request));
51 | context.setAuthentication(authToken);
52 | SecurityContextHolder.setContext(context);
53 | }
54 | }
55 | filterChain.doFilter(request, response);
56 | }
57 | }
58 |
--------------------------------------------------------------------------------
/src/main/java/com/truongbn/security/config/SecurityConfiguration.java:
--------------------------------------------------------------------------------
1 | package com.truongbn.security.config;
2 |
3 | import static org.springframework.security.config.http.SessionCreationPolicy.STATELESS;
4 |
5 | import org.springframework.context.annotation.Bean;
6 | import org.springframework.context.annotation.Configuration;
7 | import org.springframework.security.authentication.AuthenticationManager;
8 | import org.springframework.security.authentication.AuthenticationProvider;
9 | import org.springframework.security.authentication.dao.DaoAuthenticationProvider;
10 | import org.springframework.security.config.annotation.authentication.configuration.AuthenticationConfiguration;
11 | import org.springframework.security.config.annotation.web.builders.HttpSecurity;
12 | import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
13 | import org.springframework.security.config.annotation.web.configurers.AbstractHttpConfigurer;
14 | import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
15 | import org.springframework.security.crypto.password.PasswordEncoder;
16 | import org.springframework.security.web.SecurityFilterChain;
17 | import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter;
18 |
19 | import com.truongbn.security.service.UserService;
20 |
21 | import lombok.RequiredArgsConstructor;
22 |
23 | @Configuration
24 | @EnableWebSecurity
25 | @RequiredArgsConstructor
26 | public class SecurityConfiguration {
27 | private final JwtAuthenticationFilter jwtAuthenticationFilter;
28 | private final UserService userService;
29 | @Bean
30 | public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception {
31 | http.csrf(AbstractHttpConfigurer::disable)
32 | .authorizeHttpRequests(request -> request.requestMatchers("/api/v1/auth/**")
33 | .permitAll().anyRequest().authenticated())
34 | .sessionManagement(manager -> manager.sessionCreationPolicy(STATELESS))
35 | .authenticationProvider(authenticationProvider()).addFilterBefore(
36 | jwtAuthenticationFilter, UsernamePasswordAuthenticationFilter.class);
37 | return http.build();
38 | }
39 |
40 | @Bean
41 | public PasswordEncoder passwordEncoder() {
42 | return new BCryptPasswordEncoder();
43 | }
44 |
45 | @Bean
46 | public AuthenticationProvider authenticationProvider() {
47 | DaoAuthenticationProvider authProvider = new DaoAuthenticationProvider();
48 | authProvider.setUserDetailsService(userService.userDetailsService());
49 | authProvider.setPasswordEncoder(passwordEncoder());
50 | return authProvider;
51 | }
52 |
53 | @Bean
54 | public AuthenticationManager authenticationManager(AuthenticationConfiguration config)
55 | throws Exception {
56 | return config.getAuthenticationManager();
57 | }
58 | }
59 |
--------------------------------------------------------------------------------
/src/main/java/com/truongbn/security/controller/AuthenticationController.java:
--------------------------------------------------------------------------------
1 | package com.truongbn.security.controller;
2 |
3 | import org.springframework.http.ResponseEntity;
4 | import org.springframework.web.bind.annotation.PostMapping;
5 | import org.springframework.web.bind.annotation.RequestBody;
6 | import org.springframework.web.bind.annotation.RequestMapping;
7 | import org.springframework.web.bind.annotation.RestController;
8 |
9 | import com.truongbn.security.dao.request.SignUpRequest;
10 | import com.truongbn.security.dao.request.SigninRequest;
11 | import com.truongbn.security.dao.response.JwtAuthenticationResponse;
12 | import com.truongbn.security.service.AuthenticationService;
13 |
14 | import lombok.RequiredArgsConstructor;
15 |
16 | @RestController
17 | @RequestMapping("/api/v1/auth")
18 | @RequiredArgsConstructor
19 | public class AuthenticationController {
20 | private final AuthenticationService authenticationService;
21 | @PostMapping("/signup")
22 | public ResponseEntity signup(@RequestBody SignUpRequest request) {
23 | return ResponseEntity.ok(authenticationService.signup(request));
24 | }
25 |
26 | @PostMapping("/signin")
27 | public ResponseEntity signin(@RequestBody SigninRequest request) {
28 | return ResponseEntity.ok(authenticationService.signin(request));
29 | }
30 | }
31 |
--------------------------------------------------------------------------------
/src/main/java/com/truongbn/security/controller/AuthorizationController.java:
--------------------------------------------------------------------------------
1 | package com.truongbn.security.controller;
2 |
3 | import org.springframework.http.ResponseEntity;
4 | import org.springframework.web.bind.annotation.GetMapping;
5 | import org.springframework.web.bind.annotation.RequestMapping;
6 | import org.springframework.web.bind.annotation.RestController;
7 |
8 | import lombok.RequiredArgsConstructor;
9 |
10 | @RestController
11 | @RequestMapping("/api/v1/resource")
12 | @RequiredArgsConstructor
13 | public class AuthorizationController {
14 | @GetMapping
15 | public ResponseEntity sayHello() {
16 | return ResponseEntity.ok("Here is your resource");
17 | }
18 | }
19 |
--------------------------------------------------------------------------------
/src/main/java/com/truongbn/security/dao/request/SignUpRequest.java:
--------------------------------------------------------------------------------
1 | package com.truongbn.security.dao.request;
2 |
3 | import lombok.AllArgsConstructor;
4 | import lombok.Builder;
5 | import lombok.Data;
6 | import lombok.NoArgsConstructor;
7 |
8 | @Data
9 | @Builder
10 | @NoArgsConstructor
11 | @AllArgsConstructor
12 | public class SignUpRequest {
13 | private String firstName;
14 | private String lastName;
15 | private String email;
16 | private String password;
17 | }
18 |
--------------------------------------------------------------------------------
/src/main/java/com/truongbn/security/dao/request/SigninRequest.java:
--------------------------------------------------------------------------------
1 | package com.truongbn.security.dao.request;
2 |
3 | import lombok.AllArgsConstructor;
4 | import lombok.Builder;
5 | import lombok.Data;
6 | import lombok.NoArgsConstructor;
7 |
8 | @Data
9 | @Builder
10 | @NoArgsConstructor
11 | @AllArgsConstructor
12 | public class SigninRequest {
13 | private String email;
14 | private String password;
15 | }
16 |
--------------------------------------------------------------------------------
/src/main/java/com/truongbn/security/dao/response/JwtAuthenticationResponse.java:
--------------------------------------------------------------------------------
1 | package com.truongbn.security.dao.response;
2 |
3 | import lombok.AllArgsConstructor;
4 | import lombok.Builder;
5 | import lombok.Data;
6 | import lombok.NoArgsConstructor;
7 |
8 | @Data
9 | @Builder
10 | @NoArgsConstructor
11 | @AllArgsConstructor
12 | public class JwtAuthenticationResponse {
13 | private String token;
14 | }
15 |
--------------------------------------------------------------------------------
/src/main/java/com/truongbn/security/entities/Role.java:
--------------------------------------------------------------------------------
1 | package com.truongbn.security.entities;
2 |
3 | public enum Role {
4 | USER,
5 | ADMIN
6 | }
7 |
--------------------------------------------------------------------------------
/src/main/java/com/truongbn/security/entities/User.java:
--------------------------------------------------------------------------------
1 | package com.truongbn.security.entities;
2 |
3 | import java.util.Collection;
4 | import java.util.List;
5 |
6 | import org.springframework.security.core.GrantedAuthority;
7 | import org.springframework.security.core.authority.SimpleGrantedAuthority;
8 | import org.springframework.security.core.userdetails.UserDetails;
9 |
10 | import jakarta.persistence.*;
11 | import lombok.AllArgsConstructor;
12 | import lombok.Builder;
13 | import lombok.Data;
14 | import lombok.NoArgsConstructor;
15 |
16 | @Data
17 | @Builder
18 | @NoArgsConstructor
19 | @AllArgsConstructor
20 | @Entity
21 | @Table(name = "_user")
22 | public class User implements UserDetails {
23 | @Id
24 | @GeneratedValue(strategy = GenerationType.IDENTITY)
25 | private Integer id;
26 | private String firstName;
27 | private String lastName;
28 | @Column(unique = true)
29 | private String email;
30 | private String password;
31 | @Enumerated(EnumType.STRING)
32 | private Role role;
33 | @Override
34 | public Collection extends GrantedAuthority> getAuthorities() {
35 | return List.of(new SimpleGrantedAuthority(role.name()));
36 | }
37 |
38 | @Override
39 | public String getUsername() {
40 | // email in our case
41 | return email;
42 | }
43 |
44 | @Override
45 | public boolean isAccountNonExpired() {
46 | return true;
47 | }
48 |
49 | @Override
50 | public boolean isAccountNonLocked() {
51 | return true;
52 | }
53 |
54 | @Override
55 | public boolean isCredentialsNonExpired() {
56 | return true;
57 | }
58 |
59 | @Override
60 | public boolean isEnabled() {
61 | return true;
62 | }
63 | }
64 |
--------------------------------------------------------------------------------
/src/main/java/com/truongbn/security/repository/UserRepository.java:
--------------------------------------------------------------------------------
1 | package com.truongbn.security.repository;
2 |
3 | import java.util.Optional;
4 |
5 | import org.springframework.data.jpa.repository.JpaRepository;
6 | import org.springframework.stereotype.Repository;
7 |
8 | import com.truongbn.security.entities.User;
9 |
10 | @Repository
11 | public interface UserRepository extends JpaRepository {
12 | // Since email is unique, we'll find users by email
13 | Optional findByEmail(String email);
14 | }
15 |
--------------------------------------------------------------------------------
/src/main/java/com/truongbn/security/service/AuthenticationService.java:
--------------------------------------------------------------------------------
1 | package com.truongbn.security.service;
2 |
3 | import com.truongbn.security.dao.request.SignUpRequest;
4 | import com.truongbn.security.dao.request.SigninRequest;
5 | import com.truongbn.security.dao.response.JwtAuthenticationResponse;
6 |
7 | public interface AuthenticationService {
8 | JwtAuthenticationResponse signup(SignUpRequest request);
9 |
10 | JwtAuthenticationResponse signin(SigninRequest request);
11 | }
12 |
--------------------------------------------------------------------------------
/src/main/java/com/truongbn/security/service/JwtService.java:
--------------------------------------------------------------------------------
1 | package com.truongbn.security.service;
2 |
3 | import org.springframework.security.core.userdetails.UserDetails;
4 |
5 | public interface JwtService {
6 | String extractUserName(String token);
7 |
8 | String generateToken(UserDetails userDetails);
9 |
10 | boolean isTokenValid(String token, UserDetails userDetails);
11 | }
12 |
--------------------------------------------------------------------------------
/src/main/java/com/truongbn/security/service/UserService.java:
--------------------------------------------------------------------------------
1 | package com.truongbn.security.service;
2 |
3 | import org.springframework.security.core.userdetails.UserDetailsService;
4 |
5 | public interface UserService {
6 | UserDetailsService userDetailsService();
7 | }
8 |
--------------------------------------------------------------------------------
/src/main/java/com/truongbn/security/service/impl/AuthenticationServiceImpl.java:
--------------------------------------------------------------------------------
1 | package com.truongbn.security.service.impl;
2 |
3 | import org.springframework.security.authentication.AuthenticationManager;
4 | import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
5 | import org.springframework.security.crypto.password.PasswordEncoder;
6 | import org.springframework.stereotype.Service;
7 |
8 | import com.truongbn.security.dao.request.SignUpRequest;
9 | import com.truongbn.security.dao.request.SigninRequest;
10 | import com.truongbn.security.dao.response.JwtAuthenticationResponse;
11 | import com.truongbn.security.entities.Role;
12 | import com.truongbn.security.entities.User;
13 | import com.truongbn.security.repository.UserRepository;
14 | import com.truongbn.security.service.AuthenticationService;
15 | import com.truongbn.security.service.JwtService;
16 |
17 | import lombok.RequiredArgsConstructor;
18 |
19 | @Service
20 | @RequiredArgsConstructor
21 | public class AuthenticationServiceImpl implements AuthenticationService {
22 | private final UserRepository userRepository;
23 | private final PasswordEncoder passwordEncoder;
24 | private final JwtService jwtService;
25 | private final AuthenticationManager authenticationManager;
26 | @Override
27 | public JwtAuthenticationResponse signup(SignUpRequest request) {
28 | var user = User.builder().firstName(request.getFirstName()).lastName(request.getLastName())
29 | .email(request.getEmail()).password(passwordEncoder.encode(request.getPassword()))
30 | .role(Role.USER).build();
31 | userRepository.save(user);
32 | var jwt = jwtService.generateToken(user);
33 | return JwtAuthenticationResponse.builder().token(jwt).build();
34 | }
35 |
36 | @Override
37 | public JwtAuthenticationResponse signin(SigninRequest request) {
38 | authenticationManager.authenticate(
39 | new UsernamePasswordAuthenticationToken(request.getEmail(), request.getPassword()));
40 | var user = userRepository.findByEmail(request.getEmail())
41 | .orElseThrow(() -> new IllegalArgumentException("Invalid email or password."));
42 | var jwt = jwtService.generateToken(user);
43 | return JwtAuthenticationResponse.builder().token(jwt).build();
44 | }
45 | }
46 |
--------------------------------------------------------------------------------
/src/main/java/com/truongbn/security/service/impl/JwtServiceImpl.java:
--------------------------------------------------------------------------------
1 | package com.truongbn.security.service.impl;
2 |
3 | import java.security.Key;
4 | import java.util.Date;
5 | import java.util.HashMap;
6 | import java.util.Map;
7 | import java.util.function.Function;
8 |
9 | import org.springframework.beans.factory.annotation.Value;
10 | import org.springframework.security.core.userdetails.UserDetails;
11 | import org.springframework.stereotype.Service;
12 |
13 | import com.truongbn.security.service.JwtService;
14 |
15 | import io.jsonwebtoken.Claims;
16 | import io.jsonwebtoken.Jwts;
17 | import io.jsonwebtoken.SignatureAlgorithm;
18 | import io.jsonwebtoken.io.Decoders;
19 | import io.jsonwebtoken.security.Keys;
20 |
21 | @Service
22 | public class JwtServiceImpl implements JwtService {
23 | @Value("${token.signing.key}")
24 | private String jwtSigningKey;
25 | @Override
26 | public String extractUserName(String token) {
27 | return extractClaim(token, Claims::getSubject);
28 | }
29 |
30 | @Override
31 | public String generateToken(UserDetails userDetails) {
32 | return generateToken(new HashMap<>(), userDetails);
33 | }
34 |
35 | @Override
36 | public boolean isTokenValid(String token, UserDetails userDetails) {
37 | final String userName = extractUserName(token);
38 | return (userName.equals(userDetails.getUsername())) && !isTokenExpired(token);
39 | }
40 |
41 | private T extractClaim(String token, Function claimsResolvers) {
42 | final Claims claims = extractAllClaims(token);
43 | return claimsResolvers.apply(claims);
44 | }
45 |
46 | private String generateToken(Map extraClaims, UserDetails userDetails) {
47 | return Jwts.builder().setClaims(extraClaims).setSubject(userDetails.getUsername())
48 | .setIssuedAt(new Date(System.currentTimeMillis()))
49 | .setExpiration(new Date(System.currentTimeMillis() + 1000 * 60 * 24))
50 | .signWith(getSigningKey(), SignatureAlgorithm.HS256).compact();
51 | }
52 |
53 | private boolean isTokenExpired(String token) {
54 | return extractExpiration(token).before(new Date());
55 | }
56 |
57 | private Date extractExpiration(String token) {
58 | return extractClaim(token, Claims::getExpiration);
59 | }
60 |
61 | private Claims extractAllClaims(String token) {
62 | return Jwts.parserBuilder().setSigningKey(getSigningKey()).build().parseClaimsJws(token)
63 | .getBody();
64 | }
65 |
66 | private Key getSigningKey() {
67 | byte[] keyBytes = Decoders.BASE64.decode(jwtSigningKey);
68 | return Keys.hmacShaKeyFor(keyBytes);
69 | }
70 | }
71 |
--------------------------------------------------------------------------------
/src/main/java/com/truongbn/security/service/impl/UserServiceImpl.java:
--------------------------------------------------------------------------------
1 | package com.truongbn.security.service.impl;
2 |
3 | import org.springframework.security.core.userdetails.UserDetails;
4 | import org.springframework.security.core.userdetails.UserDetailsService;
5 | import org.springframework.security.core.userdetails.UsernameNotFoundException;
6 | import org.springframework.stereotype.Service;
7 |
8 | import com.truongbn.security.repository.UserRepository;
9 | import com.truongbn.security.service.UserService;
10 |
11 | import lombok.RequiredArgsConstructor;
12 |
13 | @Service
14 | @RequiredArgsConstructor
15 | public class UserServiceImpl implements UserService {
16 | private final UserRepository userRepository;
17 | @Override
18 | public UserDetailsService userDetailsService() {
19 | return new UserDetailsService() {
20 | @Override
21 | public UserDetails loadUserByUsername(String username) {
22 | return userRepository.findByEmail(username)
23 | .orElseThrow(() -> new UsernameNotFoundException("User not found"));
24 | }
25 | };
26 | }
27 | }
28 |
--------------------------------------------------------------------------------
/src/main/resources/application.yaml:
--------------------------------------------------------------------------------
1 | spring:
2 | application:
3 | name: spring-security
4 | jpa:
5 | # Provide database platform that is being used
6 | database-platform: org.hibernate.dialect.H2Dialect
7 | hibernate:
8 | # New database is created when application starts and destroyed when application is stopped
9 | ddl-auto: create-drop
10 | # Show sql when spring data jpa performs query
11 | show-sql: true
12 | properties:
13 | hibernate:
14 | # Format queries
15 | format_sql: true
16 | datasource:
17 | # URL connection to database (spring-security is database name)
18 | url: jdbc:h2:mem:spring-security
19 | # H2 sql Driver
20 | driver-class-name: org.h2.Driver
21 | username: root
22 | password: 12345
23 | h2:
24 | console:
25 | enabled: true
26 | token:
27 | signing:
28 | key: 413F4428472B4B6250655368566D5970337336763979244226452948404D6351
29 |
--------------------------------------------------------------------------------
/src/test/java/com/truongbn/security/SecurityApplicationTests.java:
--------------------------------------------------------------------------------
1 | package com.truongbn.security;
2 |
3 | import org.junit.jupiter.api.Test;
4 | import org.springframework.boot.test.context.SpringBootTest;
5 |
6 | @SpringBootTest
7 | class SecurityApplicationTests {
8 |
9 | @Test
10 | void contextLoads() {
11 | }
12 |
13 | }
14 |
--------------------------------------------------------------------------------