Hands-On Spring Security 5 for Reactive Applications

Simple REST API security

We will use the example that we created in Chapter 5, Integrating with Spring WebFlux (spring-boot-spring-webflux) and expand on it by doing the following:

• Bringing the JWT support to the already existing Spring WebFlux application secured using basic authentication.
• Creating a new controller (path /auth/**) that will have new endpoints, using which you can authenticate the user.
• Using basic authentication or the auth REST endpoint, we will generate the JWT on the server and send it as a response to the client. Subsequent calls from the client to access secured REST APIs can be achieved by using the JWT supplied as a HTTP header (authorization, bearer token).

We won't be able to go into each and every detail of ...