Hands-On Spring Security 5 for Reactive Applications

Custom WebFilter namely JWTAuthWebFilter

Our custom WebFilter, named JWTAuthWebFilter, is entrusted with converting the JWT token received into appropriate classes that the Spring Security understands. It makes use of a converter named JWTAuthConverter, which does a number of things, as follows:

• Gets the authorization payload
• Extracts the token by discarding the Bearer string
• Verifies the token
• Creates a UsernamePasswordAuthenticationToken class understood by Spring Security

The code snippet below shows the JWTAuthWebFilter class and its important method which does operations listed above.

public class JWTAuthConverter implements Function<ServerWebExchange,                     Mono<Authentication>> {    @Override public Mono<Authentication> apply(ServerWebExchange ...