asmhatre/jwt-auth-demo
1
0
Fork 0
Code Activity

Spring Security 7.1 JWT authentication on Spring Boot 4.1

Browse Source 
Runnable companion for https://ankurm.com/spring-security-7-1-jwt-authentication-guide/

- login -> token issue -> OncePerRequestFilter -> SecurityContext, end to end
- HS256 and RS256 variants (RS256 publishes a real JWKS endpoint)
- the same API secured by the built-in oauth2ResourceServer().jwt(), for comparison
- 11 documentation chapters under docs/, interlinked with the code
- docs/output/ is real captured output, regenerated by scripts/run-all.sh
- 13 passing tests pinning the 401-vs-403 contract and the CSRF failure

Verified against Spring Boot 4.1.1, Spring Security 7.1.1, JDK 25.0.4.1.
This commit is contained in:
asmhatre
2026-08-22 06:22:25 +00:00
commit 4a8dab6739
57 changed files with 4339 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
docs/output/test-run.txt Normal file
View File

@@ -0,0 +1,14 @@
==========================================================================
jwt-auth-demo - test run
==========================================================================
Running com.ankurm.jwtauth.AuthenticationFlowTests
Tests run: 10, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 6.134 s -- in com.ankurm.jwtauth.AuthenticationFlowTests
Running com.ankurm.jwtauth.CsrfBreaksPermitAllTests
Tests run: 3, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 1.014 s -- in com.ankurm.jwtauth.CsrfBreaksPermitAllTests
Tests run: 13, Failures: 0, Errors: 0, Skipped: 0
BUILD SUCCESS
JDK : openjdk version "25.0.4.1" 2026-08-18 LTS (Temurin 25.0.4.1+1)
Boot : 4.1.1
Security : 7.1.1