1© 2016 Pivotal

Spring Boot Authentication... and More!

Micah Silverman, Java Developer Evangelist, Stormpath@afitnerd

2

Learn More. Stay Connected.

Twitter: twitter.com/gostormpath

Blog: stormpath.com/blog

GitHub: github.com/stormpath

Docs: docs.stormpath.com

Twitter: twitter.com/springcentral

YouTube: spring.io/video

LinkedIn: spring.io/linkedin

Google Plus: spring.io/gplus

3

Agenda

Authentication Pain Points in Java Stormpath, Spring Boot, and Your Architecture Demo: Authentication in Spring Boot with these features:• A complete user registration and login system

• Pre-built login screens

• Password reset workflows

• Group-based authorization

• Advanced user features: API authentication, Single Sign-On, social login, and more

Technical Q&A

4

Speed to Marketing & Cost Reduction

Complete Identity solution out-of-the-box

Security best practices and updates by default

Clean & elegant API/SDKs

Little to code, no maintenance

Focus on Your Core Competency

5

Stormpath User Management

User Data

User Workflows Google ID

Application SDK

Application SDK

Application SDK

ID Integrations

Facebook

Active Directory

SAML

6

Features

Secure, flexible Authentication • (Password, Token, OAuth, API)

Deep Authorization• Groups, Roles

• Customer Organizations

• Permissions

Customer Profile Data Single Sign-On Across Your Apps Hosted User Screens

7

Authentication Pain Points in Java

Typical Authentication coding tasks:• Large pile of code

• NOTHING to do with your business

• And you must maintain

You’re on your own:• DO NOT forget to encrypt those passwords

• DO NOT forget to include CSRF tokens in your templates

8

Stormpath, Spring Boot, and Your Architecture

1. Create a Stormpath account

2. Create and API Access keyset

3. Choose your Stormpath Spring Boot Starter

4. Write your Spring Boot App

9

Stormpath Spring Boot Integration Architecture

stormpath-default-spring-boot-starter

stormpath-spring-boot-starter

stormpath-spring

stormpath-spring-security-webmvc-spring-boot-starter

stormpath-thymeleaf-spring-boot-starter

stormpath-webmvc-spring-boot-starter

stormpath-spring-security-spring-boot-starter

10

DemoSpring Boot Starter

11

Questions?

12

Thank You!