hantsy/spring-reactive-jwt-sample

Secures REST APIs with Spring Security and JWT Token-based Authentication powered by Spring Reactive stack

Spring Reactive JWT Sample

As an alternative of spring-webmvc-jwt-sample which is implemented in Spring Servlet stack, this sample project combines the latest Spring WebFlux, Spring Security to implement JWT token based authentication in Spring Reactive stack.

Guide

Secures RESTful APIs with Spring Security WebFlux and JWT Token Authentication

Build

Make sure you have installed the following software:

• Apache Maven 3.6
• JDK 17
• Docker for Desktop(for Windows users and MacOS users)
• Python (Optional for contributors)

Clone the source codes into your local system.

git clone https://github.com/hantsy/spring-reactive-jwt-sample

There is a docker-compose.yml file in the project root folder.

Run the following command to start up a MongoDb service .

docker-compose up mongodb

NOTE: You can install a local MongoDb instead of using Docker.

Then run the application by Spring boot maven plugin directly.

mvn spring-boot:run

Contribute

File an issue on Github issue if you have any idea.

If you want to send a PR directly, install python and pre-commit to check your git comments style and code style.

pip install pre-commit
pre-commit install --hook-type commit-msg --hook-type pre-push

spring-reactive-jwt-sample's Issues

Action Required: Fix Renovate Configuration

There is an error with this repository's Renovate configuration that needs to be fixed. As a precaution, Renovate will stop PRs until it is resolved.

Error type: undefined. Note: this is a nested preset so please contact the preset author if you are unable to fix it yourself.

JwtTokenAuthenticationFilter invoked for every uri even though permitAll

Hi hansty,

Thanks for the great example.I am facing an issue where Filter is called for every URI even for /actuator/health.Is that expected behavior ?How can we exclude /actuator/**?

JUnit tests should include assert() or fail()

Codacy detected an issue:

Message: JUnit tests should include assert() or fail()

Occurred on:

• Commit: f06f769
• File: src/test/java/com/example/demo/CommentRepositoryTest.java
• LineNum: 57
• Code: public void testAddComment() {

Currently on:

• Commit: 12607ae
• File: src/test/java/com/example/demo/CommentRepositoryTest.java
• LineNum: 57

The rule does not detect assertThat, and other assertations from assertj.

Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Awaiting Schedule

These updates are awaiting their schedule. Click on a checkbox to get an update now.

• chore(deps): update dependency org.jacoco:jacoco-maven-plugin to v0.8.12
• fix(deps): update dependency org.springframework.boot:spring-boot-starter-parent to v3.2.4
• chore(deps): update dependency org.sonarsource.scanner.maven:sonar-maven-plugin to v3.11.0.3922
• chore(deps): update actions/cache action to v4
• chore(deps): update actions/stale action to v9
• chore(deps): update codecov orb to v4
• chore(deps): update dependency org.glassfish.jaxb:jaxb-runtime to v4
• chore(deps): update dependency ubuntu to v22

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• chore(deps): update jitsecurity-controls/jit-github-action action to v4.2.1
• chore(deps): update dependency com.puppycrawl.tools:checkstyle to v10.15.0

Detected dependencies

circleci

.circleci/config.yml

• maven 1.4.1
• codecov 3.3.0

docker-compose

docker-compose.local.yml

docker-compose.yml

dockerfile

Dockerfile

• openjdk 21-jdk-slim

droneci

.drone.yml

• maven 3.9.6-eclipse-temurin-21-alpine

github-actions

.github/workflows/build.yml

• actions/checkout v4
• actions/setup-java v4
• actions/cache v3
• actions/cache v3

.github/workflows/dockerize.yml

• actions/checkout v4
• actions/setup-java v4
• actions/cache v3

.github/workflows/greetings.yml

• actions/first-interaction v1

.github/workflows/jit-security.yml

• jitsecurity-controls/jit-github-action v4.2.0
• jitsecurity-controls/jit-github-action v4.2.0
• jitsecurity-controls/jit-github-action v4.2.0
• jitsecurity-controls/jit-github-action v4.2.0
• jitsecurity-controls/jit-github-action v4.2.0
• jitsecurity-controls/jit-github-action v4.2.0
• jitsecurity-controls/jit-github-action v4.2.0
• jitsecurity-controls/jit-github-action v4.2.0
• jitsecurity-controls/jit-github-action v4.2.0
• jitsecurity-controls/jit-github-action v4.2.0
• jitsecurity-controls/jit-github-action v4.2.0
• jitsecurity-controls/jit-github-action v4.2.0
• jitsecurity-controls/jit-github-action v4.2.0
• jitsecurity-controls/jit-github-action v4.2.0
• jitsecurity-controls/jit-github-action v4.2.0
• jitsecurity-controls/jit-github-action v4.2.0
• jitsecurity-controls/jit-github-action v4.2.0
• jitsecurity-controls/jit-github-action v4.2.0
• jitsecurity-controls/jit-github-action v4.2.0
• jitsecurity-controls/jit-github-action v4.2.0
• jitsecurity-controls/jit-github-action v4.2.0
• jitsecurity-controls/jit-github-action v4.2.0
• jitsecurity-controls/jit-github-action v4.2.0
• ubuntu 20.04
• ubuntu 20.04
• ubuntu 20.04
• ubuntu 20.04
• ubuntu 20.04
• ubuntu 20.04
• ubuntu 20.04
• ubuntu 20.04
• ubuntu 20.04
• ubuntu 20.04
• ubuntu 20.04
• ubuntu 20.04
• ubuntu 20.04
• ubuntu 20.04
• ubuntu 20.04
• ubuntu 20.04
• ubuntu 20.04
• ubuntu 20.04
• ubuntu 20.04
• ubuntu 20.04
• ubuntu 20.04
• ubuntu 20.04
• ubuntu 20.04

.github/workflows/label.yml

• actions/labeler v5

.github/workflows/stale.yml

• actions/stale v8

maven

pom.xml

• org.springframework.boot:spring-boot-starter-parent 3.2.3
• io.jsonwebtoken:jjwt-api 0.12.5
• io.jsonwebtoken:jjwt-impl 0.12.5
• io.jsonwebtoken:jjwt-jackson 0.12.5
• org.apache.maven.plugins:maven-surefire-plugin 3.2.5
• org.sonarsource.scanner.maven:sonar-maven-plugin 3.10.0.2594
• org.eluder.coveralls:coveralls-maven-plugin 4.3.0
• javax.xml.bind:jaxb-api 2.3.1
• org.glassfish.jaxb:jaxb-runtime 2.3.9
• io.spring.javaformat:spring-javaformat-maven-plugin 0.0.41
• org.apache.maven.plugins:maven-checkstyle-plugin 3.3.1
• com.puppycrawl.tools:checkstyle 10.14.0
• io.spring.javaformat:spring-javaformat-checkstyle 0.0.41
• org.jacoco:jacoco-maven-plugin 0.8.11

maven-wrapper

.mvn/wrapper/maven-wrapper.properties

• maven 3.9.6

---

• Check this box to trigger a request for Renovate to run again on this repository

Use Pageable for pagination in MongoDB query

Currently, the pagination operation of Post document used Flux's skip and take method. Replace it with Pageable.

Only ADMIN role or post author can update post

Currently the post update can done by any authenticated users, but it should be litmitted in the post author and the system ADMIN.