- 51
- 378 378
Dive Into Development
Приєднався 18 вер 2022
Together, we will learn various concepts of the frameworks like #springboot and #quarkus using #java. We also will have the videos on the tools, technologies, frameworks, and libraries with which the java frameworks interact to achieve specific goals. Playlists is the most important way to learn in detail and hence you will find more and more with time.
Spring AOP Ch-4 : Features of advices @Before @AfterReturning @AfterThrowing @After with example
Buy Me A Coffee : www.buymeacoffee.com/diveIntoDev
Переглядів: 47
Відео
Spring AOP Ch-3 : Flow of execution of advices at a single join point in detail
Переглядів 91День тому
#springaop #springframework #springaspectorientedprogramming #aop #aspectorientedprogramming #aspects GitHub : github.com/dive-into-dev/spring-aop In this video we will see the detailed steps of flow of execution of the advices in detail both the success and failure case. Buy Me A Coffee : www.buymeacoffee.com/diveIntoDev
Spring AOP Ch-2 : Understanding the order of execution of different advices on a specific join point
Переглядів 6014 днів тому
#springaop #springframework #springaspectorientedprogramming #aop #aspectorientedprogramming #aspects GitHub : github.com/dive-into-dev/spring-aop This video explains the order of execution of the advices like Before, AfterReturning, AfterThrowing, After, and Around when all of them joins on a single join point Buy Me A Coffee : www.buymeacoffee.com/diveIntoDev
Spring AOP Ch-1 : Introduction to spring aspect oriented programming. Understanding AOP concepts
Переглядів 7214 днів тому
#springaop #springframework #springaspectorientedprogramming #aop #aspectorientedprogramming #aspects Buy Me A Coffee : www.buymeacoffee.com/diveIntoDev
Part 4.1 - Keycloak introduces user profile from version 24
Переглядів 3,4 тис.5 місяців тому
Buy Me A Coffee : www.buymeacoffee.com/diveIntoDev
Part 15 - How to get user information of logged in user in spring boot after auth on keycloak
Переглядів 2,8 тис.9 місяців тому
#springboot #keycloak #authetication #authorization Once the user is authenticated on the keycloak, if we need to get the logged in user information within the spring boot application then we need to tweak some part of the code. This can be achieved using the AuthenticationPrincipal and JWT object. This video explains on how to do the same. Buy Me A Coffee : www.buymeacoffee.com/diveIntoDev
Spring boot native image using GraalVM for Windows
Переглядів 1 тис.10 місяців тому
Download GraalVM community edition : github.com/graalvm/graalvm-ce-builds/releases/ Medium article for installation on windows : medium.com/graalvm/using-graalvm-and-native-image-on-windows-10-9954dc071311 Buy Me A Coffee : www.buymeacoffee.com/diveIntoDev
How can we connect to multiple databases in spring boot?
Переглядів 2,5 тис.11 місяців тому
#springboot #springboottutorial #multipledatabase #multipledb This video explains two ways to perform CRUD operations in spring boot and introduce the relationship between the data source, entity manager, transaction manager, jpa repository, and the rest controller. It also explains the multiple database connection configurations. The ways to set the hibernate properties in these cases and a po...
Part 10.6 - Different keycloak policies using spring boot 3
Переглядів 2,4 тис.11 місяців тому
#authenticationandauthorization #keycloak #springboot3 #accessmanagement #keycloakpolicies This video contains the explanation of various policies available in keycloak apart from role based policy. We will have a glance on the policies like User, Group, RegEx, and Time based. Buy Me A Coffee : www.buymeacoffee.com/diveIntoDev
Part 14 - Keycloak deprecates spring boot adapter library
Переглядів 1,9 тис.11 місяців тому
#authenticationandauthorization #keycloak #springboot3 #accessmanagement
Part 13 - Keycloak javascript provider using Spring boot 3 for logged in user access
Переглядів 2,3 тис.Рік тому
#authenticationandauthorization #keycloak #springboot3 #accessmanagement #javascriptprovider #keycloakjavascriptprovider
Part 12 - SSO (Single Sign On) using Spring Boot 3, Keycloak, and Gmail
Переглядів 7 тис.Рік тому
#singlesignon #keycloak #springboot3 #authenticationandauthorization #sso
Part 11.4 - How the REST API client calls are designed to be invoked from spring boot 3 to keycloak
Переглядів 2,3 тис.Рік тому
#authenticationandauthorization #keycloak #springboot3 #clientAPI An understanding on how the REST API calls are designed to be invoked from spring boot 3 application to perform create, read, update, and delete (CRUD) operations on Keycloak.
Part 11.3 - User and Roles CRUD operations from spring boot 3 instead of keycloak
Переглядів 3,9 тис.Рік тому
#authenticationandauthorization #keycloak #springboot3 #crudoperations This video explains on how to perform the create, update, get the list, get detail, and delete the users and roles from spring boot 3 application instead of performing those operations on keycloak.
Part 11.2 - Create and fetch users from spring boot 3 instead of keycloak
Переглядів 7 тис.Рік тому
#authenticationandauthorization #usercreation #keycloak #springboot3 #accessmanagement
Part 11.1 - Understanding spring boot 3 client communication with keycloak
Переглядів 2,8 тис.Рік тому
Part 11.1 - Understanding spring boot 3 client communication with keycloak
Part 10.5 - Configure Keycloak authentication and authorization using Scope for Spring Boot 3
Переглядів 4,7 тис.Рік тому
Part 10.5 - Configure Keycloak authentication and authorization using Scope for Spring Boot 3
Part 10.4 - Understanding the Required and Logic properties of Policy in Keycloak for Spring Boot 3
Переглядів 3,1 тис.Рік тому
Part 10.4 - Understanding the Required and Logic properties of Policy in Keycloak for Spring Boot 3
Part 10.3 - Configure resource, roles & policies in Keycloak for authorization for Spring Boot 3
Переглядів 7 тис.Рік тому
Part 10.3 - Configure resource, roles & policies in Keycloak for authorization for Spring Boot 3
Part 10.2 - Configure Spring Boot 3 to connect Keycloak for authentication
Переглядів 6 тис.Рік тому
Part 10.2 - Configure Spring Boot 3 to connect Keycloak for authentication
Part 10.1 - Configure Keycloak for Spring Boot 3 authentication
Переглядів 6 тис.Рік тому
Part 10.1 - Configure Keycloak for Spring Boot 3 authentication
Part 9 - Keycloak with Spring Boot 3 and Swagger
Переглядів 8 тис.Рік тому
Part 9 - Keycloak with Spring Boot 3 and Swagger
Part 8.3 - Authorization using keycloak and spring boot 3 using Oauth2 default JWT converter
Переглядів 8 тис.Рік тому
Part 8.3 - Authorization using keycloak and spring boot 3 using Oauth2 default JWT converter
Part 8.2 - Demonstration of authorization using spring boot 3 and keycloak
Переглядів 8 тис.Рік тому
Part 8.2 - Demonstration of authorization using spring boot 3 and keycloak
Part 8.1 - Understanding the authorization process provided by Spring boot 3 Oauth2 Resource
Переглядів 8 тис.Рік тому
Part 8.1 - Understanding the authorization process provided by Spring boot 3 Oauth2 Resource
Part 7.2 - Demonstrate Spring boot authentication process using oauth2 resource server and Keycloak
Переглядів 12 тис.Рік тому
Part 7.2 - Demonstrate Spring boot authentication process using oauth2 resource server and Keycloak
Part 7.1 - Spring boot authentication process using oauth2 resource server and Keycloak
Переглядів 11 тис.Рік тому
Part 7.1 - Spring boot authentication process using oauth2 resource server and Keycloak
Part 6 - Use Case Diagram for the spring boot resource server
Переглядів 8 тис.Рік тому
Part 6 - Use Case Diagram for the spring boot resource server
Part 5 - Create Spring boot client in Keycloak authentication server
Переглядів 9 тис.Рік тому
Part 5 - Create Spring boot client in Keycloak authentication server
Authentication process using client, authentication server(keycloak), and resource server.
Переглядів 32 тис.Рік тому
Authentication process using client, authentication server(keycloak), and resource server.
Here Address is added as group and individual attributes added via Realm Settings. In the Client -> Dedicated scope , it shows some predefined mappers like Address.. how is this different from above? Can you make a session on that please
Thank you for making such wonderful content
Thanks for the wonderful sessions. In my installation of Key Cloak, I don't see Users having Attributes tab. but Realm Settings->User Profile has Attributes->Create attribute
Please check the video part 4.1
Great content in the series. Concepts are clearly explained making the tutorials interesting
Can you please make a session on how to refresh the token automatically from Spring application once its about to expire? otherwise the User will get logged out when he is in the middle of a transaction
Ideally, that should be the responsibility of the frontend application to make sure the token is refreshed if it is expired using the method explained in Part 4. Because FE is responsible to redirect to the login page after session expires and it should use the refresh_token to regenerate the access token before redirecting to the login.
@@diveintodev Thank you for quick response
I watched almost 6-7 UA-cam channels on key cloak with Spring as resource server. But I could not see the depth and quality of explanation as I see in this. After a month of exploring all possible videos on key cloak which left me confused and my head so heavy that for a week I could not take any more information and was about to give up and I stumbled on this video.. I thoroughly enjoyed as I could comprehend every bit of what is explained. Great Job
Glad that this was helpful. You can also go through the playlist as it has more information in the further videos as well. Hopefully it'll be more helpful
Hi Sagar How we can sign up a user in keyclaok? will be thankful for your reply.
If you want an admin user to login to the keycloak then ua-cam.com/video/NIo4LQH4wIA/v-deo.html is the place you get it. If you want to create a new user then login to the keycloak to create the users. The playlist has all the videos and hopefully that will answer your questions.
@@diveintodev Thanks for your reply. I want to create a user by Node API. Is there any video you created for that? If Yes. Please share the link. I will be thankful for your reply.
How Authorization will work in keycloak For example if a user requested with particular endpoint it tokens gets validated but after it has to undergo Authorization Can you plz tell how to do it
Please watch the playlist on spring boot with keycloak for the detailed understanding of authorization.
Okay thank you
Hi I dont see any helpful video on Client Scope based policy, could you please create one ? or at least explain how to do testing?
thank you, I have a small question - are we required to have duplicate roles in our JWT in this approach?
We do not need duplicate roles in our JWT
Omg sir, your tutorial is ultimate! Thank you
Glad it was helpful!
very useful, thanks for making this kind of videos.
Glad that this was useful
"Thank you for the excellent explanation! I have a question regarding how Keycloak handles complex attribute groups like an address in the user profile. When we define an address with multiple fields as a group of attributes, how is it stored in the database? Is it saved as part of the user entity, or does it create a separate address entity? Additionally, is it possible in Keycloak to define a custom entity, such as an 'Account' entity, and establish a one-to-many relationship with the user entity?"
The newly added attributes for the address are stored in user_attribute table. In fact all the attributes that are added in the user profile are stored in user_attribute table irrespective of the grouping if that attribute is not available as a column in user_entity table. You can create a new entity for account with the relationship to the user_entity using a custom provider. But the catch here is that you may not be able to establish one-to-many mapping and your entity may be loosely coupled.
1:37 - Better to select "utf8". From docs: "Note that the utf8mb4 character set is not supported due to different storage requirements for the utf8 character set."
Hi, thanks for the video. Is it also possible if I use mongoDB instead of mariaDB? How would the settings be? I appreciate your help
Keycloak does not support mongoDB anymore. The list of supported database is available at www.keycloak.org/server/db
Hai this is great tutorial, very in-depth knowledge has bee provided. Can you make video on microservice swagger aggregation on the api gateway with keycloak
The information you shared in this video is really good !!
Glad it was helpful!
Very useful playlist .. Thanks for sharing .. please can you provide the github repo in the description
Please check the playlist description.
nice Deep DIve .. Keep it up
I configured my keycloak server to work in production mode, and https with self-signed certificate. I get "PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target" error on Spring Boot side. How can I solve this problem? Thank you!
Hi is there an api to return the count for users associated with specific client role?
User count for the realm is available but not for a specific client role. You might need to combine more than one API to get it.
Hey bro. Why client-id has to be "admin-cli". I wanna put my client "keycloak-backend". It's impossible?
Hey bro. Can you help me? I'm using Keycloak with Swagger, but Swagger isn't working. Apparently Swagger isn't sending the token for Keycloak, resulting in error 403. Do you know how to resolve it?
Did you add securityscheme and security requirement annotations as explained in part 9? Make sure you import the proper package for these as well. You can check them on the GitHub code. Link is in the playlist description
Thank you for for your illustration videos. But I have a some confusion, in previous videos you have mentioned that by using JWT tokens, the spring boot app is no longer needs to check the keycloak server to check access and instead it validates the access token provided from the requester(Client) unlike the the Opaque token. And now in this video you mentioned that after the requester send a request to the spring app with a token, the spring app sends a request to the keycloak server to check if the user is authenticated and authorized and this violates the behaviour you explained previously.
There are three ways explained in the playlist. The first is JWT which authenticates within spring boot and doesn't send it to the keycloak. The second one is when you use opeque token which sends the request for authentication to keycloak. In both of these cases the authorization takes place in spring boot. The third way is using policy enforcer which does the authorization on the keycloak. If you have observed, we have updated the security class by using policyenforcer class somewhere later. That'll give you the idea where I've explained it.
Another Great Video! I missing one part I don't understand entirely. We are always logged in to fetch a token. But in case a new user come to the app, how can they login to the app to get a acces token from outside? I have seen in other tutorials there is a redirect to keycloak register form, how can i implement this?
There are different ways to do this. Since this playlist doesn't involve front-end, we can create user as explained in ua-cam.com/video/3nq75mFi8Tg/v-deo.html video of the playlist. It's up to you to decide if this API should be behind authentication or as a public API.
@@diveintodev ok thanks, maybe you are in the mood to show us these in a another video from you, it would be very nice 🙂
one more question please, i get a warning: type="PERMISSION_TOKEN_ERROR", reason="One of the given scopes [GET] is invalid, in my console. Do you have a idea? And in postman i get a 403 when i test my endpoint with a role? i use 25.0.4, do i have create a specific scope for GET?
Are you trying to configure scope based permissions in keycloak. If you are configuring this in keycloak then you need to have "Scopes" defined under "Authorization" tab of the client and create Scope based permission in "Permissions" tab. I think you are at resource based configuration. If you are using resource based permissions (which I think you are) then disable the http-method-as-scope in "policy-enforcer.json". Either remove that property or set it to false. "http-method-as-scope": false,
@@diveintodev ok, thats helped. thank you man. you are right I'm on based-permission, I implement the security stuff in my own code and have your code just for a closer look, so it is not 1:1 and sometimes is hard to find the error then^^. Your are a really very helpful guy, thank you.
Again a great video! But as mentioned in the comments before Keykloak want to get rid of adapters. I use version 25.0.4 do you have plans for a update video for the new way, it would be great. But thank you for your content. 🙂
One of the further videos has this deprecated removal. The title has something like deprecated.
This one ua-cam.com/video/MrX_RZVJEGM/v-deo.html
@@diveintodev Bro, you are such a machine, I love you :D big big thx!
very nice tutorial, in my opinion one of the best, very detailed explained, thank you!!! 🙂 But one point, i don't find the github link.
Please check the playlist description
Do you have these steps documented anywhere ?
Unfortunately no.
One of the best videos for keycloak .Thank you so much .....please continue sir
Glad this was helpful.
Github code link pls ?
Please check the playlist description
I had one doubt since package names are in ascending order annotate, config and xml beans are created in that order or else by default however we specify beans are created in same order of annotate, config and xml ?
Great teaching! It helped me a lot with my current project. How can I buy you a beer? That's the least I could do, and I hope may others would too.
Glad that it was helpful. You can support me at www.buymeacoffee.com/diveIntoDev
@@diveintodev done. Enjoy 🙂
Even though my English isn't very good, I still persisted and finished watching this series. This tutorial has opened up a whole new world for me. I truly appreciate all the effort you've put into it. Please forgive my poor English.
Really nice to know that it's been useful. I'll try to add the subtitles for the videos so that a proper translation is available for different languages. Thank you for your kind words.
How can we work with multiple realms ?
Very informative and nice explanation, this works well with normal microservice or springboot 3. But when I add spring cloud gateway dependency it gave error in the config. Any idea?
Instead of Direct grant why not use client credentials as grant type for RESTapps too?
How do we distinguish between different logged in users in that case?
I need git link
Check the playlist description
Thanks, I had been looking for hours after this, you made my day!
Great series!
broooooo thanks a lottt. great work ❤❤
can you Please make video how to assign role to users using springboot code ?
Thanks that simple diagram at the beginning help me made sense of it all. But i had to find the names of the hibernate properties form the hibernate orm properties and not from the spring boot properties, wich should have been obvious to me but it wasnt :V
Thanks for sharing. Can you please also share the realm export with user, role and client
I dont really understand what's the purpose of the client secret here
It's like a handshake between the keycloak and the requestor
Do you have a video where you explain how to secure microservices not monolithic application using keycloak?
Not yet but will add in a few weeks
Amazing Video
Thank you for the great explaining , please add more videos about Keycloak 24, especially about roles and how to sign in with specific flow according to the role, like admin can sign in with only fingerprint, and the other users can have both ways fingerprint and fields (email and password)
Great content. Thank you.
I followed your steps and when I try to call the url keycloak/users it returns a 500 response and I get this error in the IDE logs: jakarta.ws.rs.NotAuthorizedException: HTTP 401 Unauthorized