Home / Java / Security

Spring Social Login is a demo application of how to build authentication and authorization into your Spring Boot application based on OAuth2 identity providers, such as Facebook, GitHub, Google, and others.

Spring Social Login is a demo application of how to build authentication and authorization into your Spring Boot application based on OAuth2 identity providers, such as Facebook, GitHub, Google, and others.
Information
Category: Java / Security
Watchers: 3
Star: 10
Fork: 1
Last update: Jul 12, 2020
Resource links
https://github.com/vzhemevko/spring-social-login
https://github.com/vzhemevko/spring-social-login

Spring Social Login

What is Spring Social Login

Spring Social Login is a demo application of how to build authentication and authorization into your Spring Boot application based on OAuth2 identity providers, such as Facebook, GitHub, Google, and others.

Demo

Direct link

alt text

Getting Started

Prerequisites

  • installed - Git
  • installed - Java 11
  • OAuth2 Client or App ID and Secret from the OAuth2 identity provider you are going to use for login. For example GitHub.

Creating OAuth2 identity provider app

Let's take GitHub as a demo identity provider

Go to https://github.com/settings/apps to create a new app and get Client ID and Client secret after creation.

It's also important to provide "User authorization callback URL" during app creation, so that GitHub will redirect to our application after a user authorizes. For the demo purposes set it to http://localhost:8080/login/oauth2/code/github

Start the application

Clone the repository

git clone https://github.com/vzhemevko/spring-social-login.git

After cloning the repository go to src/main/resources/application.yml and update you app GitHub ID and secret

github:
    client-id: <GITHUB APP ID>
    client-secret: <GITHUB APP SECRET>

Navigate to the root directory and build the project form the command line (alternatively, you can do it form IDE)

cd spring-social-login
gradlew build

Then you could run Spring Boot form the command line

gradlew bootRun

Or create run/debug configuration in your IDE with the main class

org.vz.spring.social.login.SpringSocialLoginApplication

After go to http://localhost:8080

Contributing

Feel free to submit pull requests

Authors

License

This project is licensed under the MIT License

Built With

Contents

    Gandi A wagtail plugin to replace the login by an OAuth2.0 Authorization Server
    bezkoder Spring Boot Login and Registration example with MySQL, JWT, Rest Api - Spring Boot Spring Security Login example
    bezkoder Spring Boot & MongoDB Login and Registration example with JWT, Spring Security, Spring Data MongoDB
    dghubble Go login handlers for authentication providers (OAuth1, OAuth2)
    spring-attic Allows you to connect your applications with SaaS providers such as Facebook and Twitter.
    linux-china Easy to expose a local Spring Boot Application to the internet by ngrok
    mploed Example Application to demo various flavours of handling domain events in Spring Boot
    hybridauth Open source social sign on PHP Library. HybridAuth goal is to act as an abstract api between your application and various social apis and identities providers such as Facebook, Twitter and Google.
    adi518 vue-facebook-login-component - A fully customizable component for integrating Facebook login.
    caffeinehit Provide OAuth2 access to your app
    mukeshsolanki A simple android library to easily implement social login into your android project
    kingbbode spring boot support for automatically loading custom yaml file.
    go-macaron Package oauth2 is a middleware that provides support of user login via an OAuth 2.0 backend for Macaron.
    oauth2-proxy OAuth2 Proxy - A reverse proxy that provides authentication with Google, Github or other providers
    SimplicityMobile A simple way to implement Facebook and Google login in your iOS apps.
    tarent JWT login microservice with plugable backends such as OAuth2, Google, Github, htpasswd, osiam, ..
    maxzerbini OAuth 2.0 Authorization Server & Authorization Middleware for Gin-Gonic
    golang Go OAuth2
    lelylan A simple Node.js client library for Oauth2
    vchaptsev vue-telegram-login Telegram Login @vchaptsevvue-telegram-login - Vue Component for Telegram Login by @vchaptsev
    stffn An unmaintained authorization plugin for Rails. Please fork to support current versions of Rails
    Share this repo

    Related Repos


    Security
    7
    JavaPassDump
    corener JavaPassDump 背景： 红队实战中，有遇到数据库的配置信息加密的情况，有些甚至在Native层处理加解密，为简化红队流程，产生一个通用的数据库信息提取工具：JavaPassDump。
     
    Security
    14
    Avoid the NEXT Log4Shell vulnerability!
    gredler A Java agent that disables features you don't use, before an attacker uses them against you.
     
    Security
    4
    JNDIExploit v1.2
    IR0DayToday # JNDIExploit JNDIExploit v1.2 JNDIExploit v1.2 here can u downoad direct from this git Direct Download for linux wget https://download1320.mediafire
     
    Security
    191
    Burpsuite extension for log4j2rce
    tangxiaofeng7 BurpLog4j2Scan Description BurpLog4j2Scan is a Burp Suite Extension written in JAVA which could be useful as scan log4j2rce. Screenshot start scan pro
     
    Security
    845
    SonarSource Static Analyzer for Java Code Quality and Security
    SonarSource Code Quality and Security for Java This SonarSource project is a code analyzer for Java projects. Information about the analysis of Java features is a
     
    Security
    280
    Log4j2 RCE Passive Scanner plugin for BurpSuite
    whwlsfb Log4j2 RCE Passive Scanner plugin for BurpSuite
     
    Security
    2.1k
    Log4j impact manufacturers and components summary from the Internet community
    YfryTchsGD Log4j impact manufacturers and components summary from the Internet community. Welcome everyone to submit mr to perfect the possible influence surface.
     
    Security
    993
    Spring Boot web application vulnerable to CVE-2021-44228, nicknamed Log4Shell.
    christophetd Spring Boot web application vulnerable to CVE-2021-44228, nicknamed Log4Shell.
     
    Security
    38
    A automatic bypass 403 Burpsuite plugin
    p0desta AutoBypass403-BurpSuite A burpsuite plugin help me automatic bypass 403. ChangeLog 2021-12-04 support multi-threaded concurrency 2021-12-02 First publ
     
    Security
    219
    Password strength estimator
    GoSimpleLLC Nbvcxz - Password strength estimator - [] nbvcxz is java library (and standalone console program) which is heavily inspired by the work in zxcvbn. Pas
     
    Security
    3
    Keeps LetsEncrypt certificates up-to-date for your Spring Boot Web application
    valb3r Keeps LetsEncrypt certificates up-to-date for your Spring Boot Web application. Pure Java in a single file of library code. An automated embedded alternative to Certbot and docker-sidecars. No JVM restart is needed on certificate update.
     
    Security
    1.1k
    This project aims to deobfuscate most commercially-available obfuscators for Java.
    java-deobfuscator This project aims to deobfuscate most commercially-available obfuscators for Java.
     
    Security
    1.3k
    CFR - Another Java Decompiler \o/
    leibnitz27 This is the public repository for the CFR Java decompiler
     
    Security
    31
    Test-Driven Security
    eleftherias Test-Driven Security Run tests ./gradlew test References Spring Security test support https://docs.spring.io/spring-security/site/docs/current/referen
     
    Security
    255
    FIDO2(WebAuthn) server officially certified by FIDO Alliance and Relying Party examples.
    line FIDO (Fast IDentity Online) is an open standard for online authentication. It is designed to solve the password problems stemming from a lot of security problems as we are suffering today.