{"id":2569,"date":"2018-06-27T00:00:00","date_gmt":"2018-06-27T00:00:00","guid":{"rendered":"https:\/\/azure.microsoft.com\/blog\/use-azure-active-directory-with-spring-security-5-0-for-oauth-2-0"},"modified":"2023-11-15T11:54:27","modified_gmt":"2023-11-15T19:54:27","slug":"use-azure-active-directory-with-spring-security-5-0-for-oauth-2-0","status":"publish","type":"post","link":"https:\/\/azure.microsoft.com\/en-us\/blog\/use-azure-active-directory-with-spring-security-5-0-for-oauth-2-0\/","title":{"rendered":"Use Azure Active Directory with Spring Security 5.0 for OAuth 2.0"},"content":{"rendered":"

We are excited to announce that Spring Starter for Azure Active Directory<\/a> (AD) is now integrated with Spring Security 5.0. It offers you an easy way to build OAuth2.0 authentication and authorization flow for your Java apps in the cloud, supporting both implicit and authorization code grant types. With only a few lines of configuration, you can build apps that perform authentication with Azure Active Directory OAuth2 and manage authorization with Azure Active Directory groups.<\/p>\n

\"Spring<\/p>\n

Get started<\/h2>\n

To start, open the Azure portal and register a new application<\/a> in Azure Active Directory (AD). Next, grant permissions to the newly created application. Use Azure Active Directory\u2019s group and member to set up the access rules. Add the Spring Security Azure AD library<\/a> to your project. Depending on the kind of application that you\u2019re building, choose from the following two authentication types to build up OAuth2.0 authentication and authorization flow. Learn more about Spring Starter for Azure Active Directory<\/a> on GitHub.<\/p>\n

Back-end authentication<\/h2>\n

Once the library of Spring Security Azure AD is added to the project, it will automatically map the Azure AD groups and Spring Security authorization logics. It allows developers to build the OAuth2.0 flow in the back end. To enable that, you only need to add the following configurations to specify the usage of OAuth2 User Service. Then you can use the annotation @PreAuthorize(“hasRole(‘GROUP_NAME’)”) for role-based authorization. To learn more, please review our example on GitHub<\/a>.<\/p>\n

@Autowired\nprivate OAuth2UserService<oidcuserrequest, oidcuser=\"\"> oidcUserService;\n\n@Override\nprotected void configure(HttpSecurity http) throws Exception {\n     http\n             .authorizeRequests()\n             .anyRequest().authenticated()\n             .and()\n             .oauth2Login()\n             .userInfoEndpoint()\n             .oidcUserService(oidcUserService);\n}<\/oidcuserrequest,><\/pre>\n
Front-end authentication<\/h2>\n
For a Single Page Application (SPA) scenario, use Azure AD library for JavaScript to handle Azure AD authentication in the front end, and autowire the AADAuthenticationFilter in your Spring Boot project. Then you can use the annotation @PreAuthorize(“hasRole(‘GROUP_NAME’)”) for role-based authorization. Learn more by reviewing the Azure Active Directory Spring Boot sample<\/a>.<\/p>\n
Next steps<\/h2>\n
Check out our project on GitHub<\/a> and learn about Spring integrations with Azure services.<\/p>\n