@ -141,9 +141,10 @@ Open your favorite text editor and add the following:
plugins {
plugins {
id 'java'
id 'java'
id 'org.springframework.boot' version '{spring-boot-version}'
id 'org.springframework.boot' version '{spring-boot-version}'
id 'io.spring.dependency-management' version '1.1.0'
}
}
apply plugin: 'io.spring.dependency-management'
group = 'com.example'
group = 'com.example'
version = '0.0.1-SNAPSHOT'
version = '0.0.1-SNAPSHOT'
sourceCompatibility = '17'
sourceCompatibility = '17'
@ -247,7 +248,7 @@ If you run `gradle dependencies` again, you see that there are now a number of a
[[getting-started.first-application.code]]
[[getting-started.first-application.code]]
=== Writing the Code
=== Writing the Code
To finish our application, we need to create a single Java file.
To finish our application, we need to create a single Java file.
By default, Maven and Gradle compiles sources from `src/main/java`, so you need to create that directory structure and then add a file named `src/main/java/MyApplication.java` to contain the following code:
By default, Maven and Gradle compile sources from `src/main/java`, so you need to create that directory structure and then add a file named `src/main/java/MyApplication.java` to contain the following code:
@ -211,7 +211,7 @@ For JWT configuration, a JWK Set URI or OIDC Issuer URI needs to be specified, a
NOTE: If the authorization server does not support a JWK Set URI, you can configure the resource server with the Public Key used for verifying the signature of the JWT.
NOTE: If the authorization server does not support a JWK Set URI, you can configure the resource server with the Public Key used for verifying the signature of the JWT.
This can be done using the configprop:spring.security.oauth2.resourceserver.jwt.public-key-location[] property, where the value needs to point to a file containing the public key in the PEM-encoded x509 format.
This can be done using the configprop:spring.security.oauth2.resourceserver.jwt.public-key-location[] property, where the value needs to point to a file containing the public key in the PEM-encoded x509 format.
The configprop:spring.security.oauth2.resourceserver.jwt.audiences[] property can be used to specifify the expected values of the aud claim in JWTs.
The configprop:spring.security.oauth2.resourceserver.jwt.audiences[] property can be used to specify the expected values of the aud claim in JWTs.
For example, to require JWTs to contain an aud claim with the value `my-audience`:
For example, to require JWTs to contain an aud claim with the value `my-audience`: