ard333/spring-boot-webflux-jjwt

Example Spring Boot and WebFlux (Reactive Web) with Spring Security and JWT for token Authentication and Authorization

spring-boot-webflux-jjwt

Example Spring Boot and WebFlux (Reactive Web) with Spring Security and JWT for token Authentication and Authorization

Documantation

You can see my Medium story, Authentication and Authorization Using JWT on Spring Webflux

spring-boot-webflux-jjwt's Issues

central maven publish

hello! can you publish security configuration to central maven? me need for project :)

JWT error handling

Scenario: when JWT token expired, and I am trying to access an API using the expired token, it's not handling properly, it's giving "ExpiredJwtException" exception in console, but in API response it's giving 500 internal server error with response
{ "timestamp": "2021-10-21T10:49:15.462+00:00", "path": "/auth/test", "status": 500, "error": "Internal Server Error", "requestId": "6469003d-1" }

Can you confirm if it is handled properly in your project or am I missing anything?
I have referred your project for most of the files & I didn't clone. So, confirming.

equals check in encoded password is not correct

In AuthenticationRest.java, the password checking should be "passwordEncoder.matches(requestPassword, userDetails.getPassword())", because "encode()" produces different hashes for same input, so equals won't work