J204. Spring Boot + Security + JWT + keycloak

[Source] (https://github.com/parkseungchul/j200/tree/master/j204)

keycloak?

keycloak 설치

keycloak 설정

curl 검증

spring 연동

curl -X POST "http://localhost:8080/auth/realms/my_realm/protocol/openid-connect/token" \
--header "Content-Type: application/x-www-form-urlencoded" \
--data-urlencode "grant_type=password" \
--data-urlencode "client_id=my_client" \
--data-urlencode "client_secret=597439a1-ac08-4347-ab5a-1e8f7e3491c4" \
--data-urlencode "username=admin" \
--data-urlencode "password=1" | jq

curl -X GET "http://localhost:8000/test/permitAll"

curl -X GET "http://localhost:8000/test/authenticated" \
--header "Authorization: bearer eyJhbGciOiJSUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICJaWkM2Rjh6ejJqSkdlU3Y3OFZVeTR0bjRuc2Zqc3lzVlNka1Zla0t0dGZvIn0.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.HCrF9c9B_oefYOVk7ENHKFQQW-hUm4M3PT9h53XLqZ0Dq6YN6Mrg6zf6FwzLUA5zcG1vvm8ZNhwW7RFSflIdpW5k3TFrswI4cJTFz_L1LQ322TCBfVBRV0fVimhOfwDnIDd_LDUDhGYy9YXkQ450JkKkRazs7ydRzTG9m7RPE_LEIbY2fyyhGpogrT8S-JfMBzJPzPdCEdyvF1LTeZtvi3jvwYjQ8TmwU14-566nQ9i5ddBlzvN3GOCJznZcyTXocOooyC-j4qvR12GXU_sacGe2s81Bp6xMCHZVsh2xILNWxVcoG-WGm3Jxl9GO00spkq4wrk2bK001CwLdeaIKgA"

curl -X GET "http://localhost:8000/test/admin" \
--header "Authorization: bearer eyJhbGciOiJSUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICJaWkM2Rjh6ejJqSkdlU3Y3OFZVeTR0bjRuc2Zqc3lzVlNka1Zla0t0dGZvIn0.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.HCrF9c9B_oefYOVk7ENHKFQQW-hUm4M3PT9h53XLqZ0Dq6YN6Mrg6zf6FwzLUA5zcG1vvm8ZNhwW7RFSflIdpW5k3TFrswI4cJTFz_L1LQ322TCBfVBRV0fVimhOfwDnIDd_LDUDhGYy9YXkQ450JkKkRazs7ydRzTG9m7RPE_LEIbY2fyyhGpogrT8S-JfMBzJPzPdCEdyvF1LTeZtvi3jvwYjQ8TmwU14-566nQ9i5ddBlzvN3GOCJznZcyTXocOooyC-j4qvR12GXU_sacGe2s81Bp6xMCHZVsh2xILNWxVcoG-WGm3Jxl9GO00spkq4wrk2bK001CwLdeaIKgA"

curl -X GET "http://localhost:8000/test/user" \
--header "Authorization: bearer eyJhbGciOiJSUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICJaWkM2Rjh6ejJqSkdlU3Y3OFZVeTR0bjRuc2Zqc3lzVlNka1Zla0t0dGZvIn0.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.HCrF9c9B_oefYOVk7ENHKFQQW-hUm4M3PT9h53XLqZ0Dq6YN6Mrg6zf6FwzLUA5zcG1vvm8ZNhwW7RFSflIdpW5k3TFrswI4cJTFz_L1LQ322TCBfVBRV0fVimhOfwDnIDd_LDUDhGYy9YXkQ450JkKkRazs7ydRzTG9m7RPE_LEIbY2fyyhGpogrT8S-JfMBzJPzPdCEdyvF1LTeZtvi3jvwYjQ8TmwU14-566nQ9i5ddBlzvN3GOCJznZcyTXocOooyC-j4qvR12GXU_sacGe2s81Bp6xMCHZVsh2xILNWxVcoG-WGm3Jxl9GO00spkq4wrk2bK001CwLdeaIKgA"