Getting Started with Spring Authorization Server

Spring Authorization Server in the 0.0.1 released. Spring authorization framework enables a third-party application to obtain limited access to an HTTP service, either on behalf of a resource owner by orchestrating an approval interaction between the resource owner and the HTTP service, or by allowing the third-party application to obtain access on its own behalf.

Spring Security OAuth provides support for using Spring Security with OAuth (1a) and OAuth2 using standard Spring and Spring Security programming models and configuration idioms.

Features

• Support for OAuth providers and OAuth consumers
• 
  
• Oauth 1(a) (including two-legged OAuth, a.k.a. "Signed Fetch")
• 
  
• OAuth 2.0

Spring Authorization Server is focused on delivering OAuth 2.0 Authorization Server support to the Spring community.

OAuth 2.0 Integration Sample

This sample integrates spring-security-oauth2-client and spring-security-oauth2-resource-server with Spring Authorization Server.

Run the Sample
Run Authorization Server → ./gradlew -b samples/boot/oauth2-integration/authorizationserver/spring-security-samples-boot-oauth2-integrated-authorizationserver.gradle bootRun

IMPORTANT: Make sure to modify your /etc/hosts file to avoid problems with session cookie overwrites between client and authorizationserver. Simply add the entry 127.0.0.1 auth-server

Run Resource Server → ./gradlew -b samples/boot/oauth2-integration/resourceserver/spring-security-samples-boot-oauth2-integrated-resourceserver.gradle bootRun

Run Client → ./gradlew -b samples/boot/oauth2-integration/client/spring-security-samples-boot-oauth2-integrated-client.gradle bootRun

Go to http://localhost:8080 and login using user1/password

You can download it from repo.spring.io and Maven Central by using the module coordinates:

compile 'org.springframework.security.experimental:spring-security-oauth2-authorization-server:0.0.1'