Advanced Openid Connect With Keycloak And Spring Boot

Step-by-Step OAuth, OpenID Connect with Keycloak and GitLab, Multi Identity Providers, Identity Brokers and Spring Boot

What you'll learn

Review of OAuth and OpenID Concepts

Understanding Keycloak as an OAuth Identity Provider

How to use Spring Security with Authorization Code with (and without) PKCE

How to use Spring Security with Client Credentials grant

Hands On coding of OAuth 2 Clients and Resource Servers with Spring Security

Hands On Enterprise Authorization using Keycloak Scopes and Roles

Hands On Identity Brokering using Keycloak with OpenID Connect

Handling Multiple Identity Providers in Spring Boot and Spring Security

Requirements

Working knowledge of Spring Boot

Description

What happens under complex OAuth and OpenID Connect scenarios? How do we handle multiple OpenID Connect Identity Providers ? How do we use Identity Brokers in an Enterprise ? How do we mix OpenID Connect and OAuth with multiple Providers ? This course on OAuth and OpenID Connect builds on my previous course Enterprise OAuth and OpenID Connect with Hands On development using Keycloak, GitLab and Spring Boot 3.x/Spring Security 6.x. Students are expected to have some knowledge of OAuth. With the help of theory and code-centric content, students will learn how to do the following. Overview of OAuth and OpenID Connect for Enterprise and Social ApplicationsProtect OpenID Connect Applications using Scopes and RolesCreate OAuth Microservices (Resource Servers)Learn how to use Client credentials in Enterprise applicationsLearn how to handle Multiple OpenID Connect Identity Providers in Spring BootLearn how to use Identity Brokers in Keycloak Learn how to  mix OAuth and OpenID Connect with Multiple Identity providers at the same timeThis course will take you to the next level in your understanding of Authentication and Authorization. Not only do we learn about real life coding but also the architectural blueprints for an enterprise which will make you an expert. REMEMBER… I'm so confident that you'll love this course that we're offering a FULL money-back guarantee for 30 days! So it's a complete no-brainer, sign up today with ZERO risk and EVERYTHING to gain.Note : More changes are on its way with more complex OpenID Connect patterns.

Overview

Section 1: Introduction to Keycloak

Lecture 1 Architecture Diagrams

Lecture 2 Keycloak Overview

Lecture 3 Keycloak Installation and Setup

Lecture 4 Postgres Installation and setup

Lecture 5 Keycloak Postgres Setup

Section 2: OAuth and OpenID Connect in a Nutshell

Lecture 6 Section Introduction

Lecture 7 OAuth Actors

Lecture 8 Clients and Scopes

Lecture 9 Access Tokens and Endpoints

Lecture 10 Authorization Code and Refresh Token Grants

Lecture 11 Implicit Grant and PKCE

Lecture 12 Client Credentials and Password Grants

Lecture 13 OpenID Connect

Lecture 14 Enterprise OpenID Connect and Roles

Section 3: Keycloak - OAuth and openID Connect with Scopes

Lecture 15 Introduction - Project BugTracker

Lecture 16 BugTracker Demonstration

Lecture 17 BugTracker Keycloak Setup

Lecture 18 BugTracker Design

Lecture 19 BugTracker Service

Lecture 20 BugTracker OpenID Connect Configuration

Lecture 21 BugTracker Http Handling

Lecture 22 BugTracker with Authorization Code Grant

Lecture 23 BugTracker with PKCE

Lecture 24 BugTracker Authorization using Scopes

Lecture 25 Download final BugTracker ZIP file for section

Section 4: Keycloak - Roles and Multiple Identity Providers

Lecture 26 Section Introduction

Lecture 27 Keycloak Mapper - Adding Role claim

Lecture 28 BugTracker Authorization using Roles

Lecture 29 Handling Multiple Identity Providers

Lecture 30 Client Registration in GitLab

Lecture 31 Spring Security and Multiple Identity Providers

Lecture 32 Customizing Authorities

Lecture 33 Problems with Multiple Identity Providers

Lecture 34 Download final BugTracker ZIP file for section

Section 5: Keycloak - OAuth and Microservices

Lecture 35 Section Introduction

Lecture 36 Creating an OAuth Microservice (Resource Server)

Lecture 37 Calling an OAuth Microservice

Lecture 38 Multiple Identity Provider problem

Lecture 39 Enterprise Schedulers and Client Credentials Grant

Lecture 40 Client Credentials in Keycloak

Lecture 41 BugTracker Scheduler using Client Credentials

Lecture 42 Download final ZIP files for this section

Section 6: Keycloak - Identity Brokers

Lecture 43 Introduction to Identity Brokers

Lecture 44 Identity Broker HTTP Message Flow

Lecture 45 Setting up Gitlab Identity Provider in Keycloak

Lecture 46 BugTracker with Identity Broker Integration

Section 7: Keycloak - OAuth and OpenID Connect together

Lecture 47 Handling Multiple Authorization Servers Simultaneously

Lecture 48 Spring Security configuration for OAuth

Lecture 49 Accessing GitLab Resource Server

Lecture 50 Fixing the Login Page

Lecture 51 Download final ZIP files for this section

Section 8: Conclusion

Lecture 52 Conclusion

Lecture 53 Bonus Lecture

Java developers who wants to build Enterprise Security with OAuth 2 and OpenID Connect