4 articles
Complete your JWT course with custom claims, RBAC with @PreAuthorize, RS256 signing, OWASP hardening, rate limiting, security auditing, comprehensive testing, and environment-specific configuration for production Spring Boot 3 applications.
Learn how to implement instant JWT revocation using JTI claims and Redis blacklisting in Spring Boot 3. Build a complete token revocation system with real logout, password-change invalidation, and production monitoring.
Learn how to implement refresh tokens with secure rotation in Spring Boot 3. Build a complete token refresh flow with JPA entities, reuse detection, HttpOnly cookies, and production-ready error handling.
Learn JWT authentication from scratch with Spring Boot 3.2 and Spring Security 6. Part 1 covers JWT fundamentals, project setup, token generation with JJWT 0.12, security filters, and building login/register endpoints.