Keycloak & Spring Security Bootcamp: API Auth for News App

Build and Secure REST API for News Application: Hands-On with OAuth 2.0, Postman, JWT, and Role-Based Access Control

Created by: Shota Fukuyama
Full-stack development, Cloud computing and DevOps

What Will I Learn?

• Understand Keycloak's core security features(Functional overview, Basic terminology)
• Understand Spring Security's key protection mechanisms(Token-based access control methods, Role-based access control methods)
• Understand API authorization mechanism (roles of Keycloak server/client/API)
• Develop and secure APIs using Keycloak and Spring Security(Keycloak server OAuth 2.0-based configuration, REST API development, Token/role-based implementation)

Requirements

• Basic knowledge of web application development (essential) -
• Basic understanding of web security (beneficial, but not mandatory)
• Basic knowledge of the Spring Framework (beneficial, but not mandatory)

Target audience

• Basic knowledge of web application development (essential) - Server-side technology fundamentals (basic Java syntax knowledge/object-oriented concepts) - Basic network knowledge (HTTP methods, status codes, etc.)
• Basic understanding of web security (beneficial, but not mandatory) - Basic understanding of OAuth 2.0 - Familiarity with terms like stateless/stateful/CSRF
• Basic knowledge of the Spring Framework (beneficial, but not mandatory) - Understanding of Dependency Injection (DI) concepts - Familiarity with annotation-based implementation methods