In the previous section, we discussed a lot about what to framework and what are different components
involved inside it and what are different art grant types that we have inside the framework.
Now, in this section, let's try to leverage our spring security framework and understand how we can
implement or to flow inside the simple application that we are going to build before we jump onto that.
First, I want to let you know that in this section I'm going to use the GitHub authorization software
to perform authentication and authorization inside my application.
Again, you can build your own server also using spring security framework, but it's very real considering
spring security operations.
Our implementations are still a to be become more mature compared to other commercial Utsav was available
inside the market.
So due to this reason, I'm going to leverage GitHub attribution server in order to implement authentication
and authorization inside my application so I know how to use it.
As I said previously, anyone who want to use the observers of these organizations first they how to
approach them and restart themselves with their own details like what is the client name application
name, what are the redirect, you are told.
So once you provide all those basic details that these providers are asking, you will get the client
ID and client secret, which can be leveraged inside the what to authentication and authorization flows.
So far the same.
I just came to the GitHub website in order to register, go up to application.
First, I have to be a user inside the GitHub.
So if I don't have the login credentials, please start with the GitHub.
Please go ahead and sign in this website.
Otherwise, if you have the credentials, you can go and signing into the website.
So I'm clicking signing.
I'm entering my credentials here.
Once your login is successful, you have to go to the user user profile icon, navigate to the settings.
Once you are on to the settings page, go to the developer settings and here you have a section for
what app?
I want to create a new application with the OR to server as a client.
So the application name that I want to do is bring security, underscore who are to whom page you are
on.
Since I don't have any website named ISTER for my application for simplicity purpose, I'll just give
you Heggarty localhost adat application description.
Also we can go like this is a sample application that uses GitHub or to pro callback.
Gural is the one which we discussed like redirect.
You are right.
So this is a value that you have to mention and this will be a default value that GitHub will consider
which will be redirected.
The user wants authentication and authorization is successful.
But if you want to have your own, you are for different, different requests.
Then you can always send that in the request that you are going to make to the alteration.
So but whatever you're mentioning here will be treated as a default.
You are and will be used when the redirect you are a value is blank and the request coming to the SO.
So once I click restart application, my application will be registered.
As you can see, I will get a client data which I copy next for client secret you have to generated
by clicking it generate new client secret and you can see here you'll get a client secret, which you
can also copy at the same time.
If you want to upload a local application logo for your application, you can also upload here.
And once you generate the client I didn't integrate, you can click again, update application.
So now you have the client ID and client secret, which you can be leveraged inside the auto framework
in the next lecture.
Let's try to understand what are the three requirements in my spring security framework in order to
implement or to insert my application.
Thank you and see you in the next section by.