spring-security-authn-and-authz-with-azure-active-directory's Introduction

Project Name

A project that demonstrates configuring Spring Security for AAD-specific features like On-Behalf-Of flow and AppRoles. It uses AAD's Boot starter to simplify configuration.

Features

This project provides the following features:

An OAuth 2.0 Client and two OAuth 2.0 Resource Servers. The client talks to the first resource server, which subsequently talks to the second resource server
It uses the AAD Boot starter to simplify configuration

Getting Started

Prerequisites

Requires JDK 8 or higher

Quickstart

git clone [email protected]:Azure-Samples/spring-security-authn-and-authz-with-azure-active-directory.git
cd spring-security-authn-and-authz-with-azure-active-directory

Demo

A demo app is included to show how to use the project.

To run the demo, follow these steps:

./gradlew :facility-request:bootRun
./gradlew :facility-inventory:bootRun
./gradlew :hr:bootRun
Navigate to http://localhost:8880

With the application started, you can click the "Login" button and log in as:

[email protected]
Voxu8138E

Then, you can click "Back" and then the "Request Standing Desk" button, and it should succeed.

Next, click "Back" again and then you can click the "Login" button and log in as:

[email protected]
Qava8536G

Then, you can click "Back" one more time and then the "Request Standing Desk" button, and it should fail.

Resources

spring-security-authn-and-authz-with-azure-active-directory's People

Contributors

Stargazers

Watchers

spring-security-authn-and-authz-with-azure-active-directory's Issues

Add Unit and Integration Test Examples

Please provide us with the following information:

This issue is for a: (mark with an `x`)

- [ ] bug report -> please search issues before submitting
- [x] feature request
- [ ] documentation issue or request
- [ ] regression (a behavior that used to work and stopped in a new release)

Minimal steps to reproduce

Look at the code.

Any log messages given by the failure

None

Expected/desired behavior

It would be really nice if you could add unit and integration test examples. It is unclear to me how I can setup a Test Security Context that somehow mocks the Azure AD Token issuing.