JAVA-13826: Align module names, folder names and artifact id (#12624)

spring-security-modules/spring-security-pkce/pkce-auth-server/src/main/java/com/baeldung/security/pkce/authserver/PkceAuthServerApplication.java

@@ -0,0 +1,13 @@
+package com.baeldung.security.pkce.authserver;
+
+import org.springframework.boot.SpringApplication;
+import org.springframework.boot.autoconfigure.SpringBootApplication;
+
+@SpringBootApplication
+public class PkceAuthServerApplication {
+
+	public static void main(String[] args) {
+		SpringApplication.run(PkceAuthServerApplication.class, args);
+	}
+
+}

spring-security-modules/spring-security-pkce/pkce-auth-server/src/main/java/com/baeldung/security/pkce/authserver/conf/AuthServerConfiguration.java

@@ -0,0 +1,99 @@
+package com.baeldung.security.pkce.authserver.conf;
+
+import java.util.UUID;
+
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.core.annotation.Order;
+import org.springframework.security.config.Customizer;
+import org.springframework.security.config.annotation.web.builders.HttpSecurity;
+import org.springframework.security.config.annotation.web.configuration.OAuth2AuthorizationServerConfiguration;
+import org.springframework.security.config.annotation.web.configurers.oauth2.server.authorization.OAuth2AuthorizationServerConfigurer;
+import org.springframework.security.config.annotation.web.configurers.oauth2.server.resource.OAuth2ResourceServerConfigurer;
+import org.springframework.security.crypto.password.NoOpPasswordEncoder;
+import org.springframework.security.crypto.password.PasswordEncoder;
+import org.springframework.security.oauth2.core.AuthorizationGrantType;
+import org.springframework.security.oauth2.core.ClientAuthenticationMethod;
+import org.springframework.security.oauth2.core.oidc.OidcScopes;
+import org.springframework.security.oauth2.server.authorization.client.InMemoryRegisteredClientRepository;
+import org.springframework.security.oauth2.server.authorization.client.RegisteredClient;
+import org.springframework.security.oauth2.server.authorization.client.RegisteredClientRepository;
+import org.springframework.security.oauth2.server.authorization.config.ClientSettings;
+import org.springframework.security.oauth2.server.authorization.config.ProviderSettings;
+import org.springframework.security.web.SecurityFilterChain;
+import org.springframework.security.web.authentication.LoginUrlAuthenticationEntryPoint;
+import org.springframework.security.web.util.matcher.RequestMatcher;
+
+@Configuration
+public class AuthServerConfiguration {
+    
+    @Bean
+    @Order(1)
+    public SecurityFilterChain authorizationServerSecurityFilterChain(HttpSecurity http) throws Exception {
+        
+        var authorizationServerConfigurer = new OAuth2AuthorizationServerConfigurer<HttpSecurity>();
+        var endpointsMatcher = authorizationServerConfigurer.getEndpointsMatcher();
+
+        // @formatter:off
+        http
+          .requestMatcher(endpointsMatcher)
+            .authorizeRequests(authorize ->
+                authorize              
+                  .anyRequest()
+                  .authenticated());
+        http
+          .exceptionHandling(exceptions -> 
+              exceptions.authenticationEntryPoint(new LoginUrlAuthenticationEntryPoint("/login")))
+          .csrf( csrf -> 
+              csrf
+                .ignoringRequestMatchers(endpointsMatcher))
+          .apply(authorizationServerConfigurer);
+         
+        // Required by /userinfo endpoint
+        http.oauth2ResourceServer(OAuth2ResourceServerConfigurer::jwt);
+        return http.build();
+        // @formatter:on
+    }
+    
+    @Bean 
+    @Order(2)
+    public SecurityFilterChain defaultSecurityFilterChain(HttpSecurity http) throws Exception {
+        // @formatter:off
+        return http
+          .formLogin(Customizer.withDefaults())
+          .build(); 
+        // @formatter:on
+    }
+        
+    @Bean 
+    public RegisteredClientRepository registeredClientRepository() {
+                
+        var pkceClient = RegisteredClient
+            .withId(UUID.randomUUID().toString())
+            .clientId("pkce-client")
+            .clientSecret("{noop}obscura")
+            .clientAuthenticationMethod(ClientAuthenticationMethod.CLIENT_SECRET_BASIC)
+            .authorizationGrantType(AuthorizationGrantType.AUTHORIZATION_CODE)
+            .authorizationGrantType(AuthorizationGrantType.REFRESH_TOKEN)
+            .authorizationGrantType(AuthorizationGrantType.CLIENT_CREDENTIALS)
+            .scope(OidcScopes.OPENID)          
+            .scope(OidcScopes.EMAIL)          
+            .scope(OidcScopes.PROFILE)
+            .clientSettings(ClientSettings.builder()
+              .requireAuthorizationConsent(false)
+              .requireProofKey(true)
+              .build())
+            .redirectUri("http://127.0.0.1:8080/login/oauth2/code/pkce") // Localhost not allowed
+            .build();
+        
+        return new InMemoryRegisteredClientRepository(pkceClient);
+    }
+    
+    @Bean 
+    public ProviderSettings providerSettings() {
+        return ProviderSettings
+          .builder()
+          .build();
+    }
+
+}

spring-security-modules/spring-security-pkce/pkce-auth-server/src/main/java/com/baeldung/security/pkce/authserver/conf/JwksConfiguration.java

@@ -0,0 +1,53 @@
+package com.baeldung.security.pkce.authserver.conf;
+
+import java.security.KeyPair;
+import java.security.KeyPairGenerator;
+import java.security.interfaces.RSAPrivateKey;
+import java.security.interfaces.RSAPublicKey;
+import java.util.UUID;
+
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.security.config.annotation.web.configuration.OAuth2AuthorizationServerConfiguration;
+import org.springframework.security.oauth2.jwt.JwtDecoder;
+
+import com.nimbusds.jose.jwk.JWKSet;
+import com.nimbusds.jose.jwk.RSAKey;
+import com.nimbusds.jose.jwk.source.ImmutableJWKSet;
+import com.nimbusds.jose.jwk.source.JWKSource;
+import com.nimbusds.jose.proc.SecurityContext;
+
+@Configuration
+public class JwksConfiguration {
+    
+    @Bean
+    public JwtDecoder jwtDecoder(JWKSource<SecurityContext> jwkSource) {
+        return OAuth2AuthorizationServerConfiguration.jwtDecoder(jwkSource);
+    }
+    
+    @Bean 
+    public JWKSource<SecurityContext> jwkSource() {
+        KeyPair keyPair = generateRsaKey();
+        RSAPublicKey publicKey = (RSAPublicKey) keyPair.getPublic();
+        RSAPrivateKey privateKey = (RSAPrivateKey) keyPair.getPrivate();
+        RSAKey rsaKey = new RSAKey.Builder(publicKey)
+          .privateKey(privateKey)
+          .keyID(UUID.randomUUID().toString())
+          .build();
+        JWKSet jwkSet = new JWKSet(rsaKey);
+        return new ImmutableJWKSet<>(jwkSet);
+    }
+
+    private static KeyPair generateRsaKey() { 
+        KeyPair keyPair;
+        try {
+            KeyPairGenerator keyPairGenerator = KeyPairGenerator.getInstance("RSA");
+            keyPairGenerator.initialize(2048);
+            keyPair = keyPairGenerator.generateKeyPair();
+        }
+        catch (Exception ex) {
+            throw new IllegalStateException(ex);
+        }
+        return keyPair;
+    }
+}

spring-security-modules/spring-security-pkce/pkce-auth-server/src/main/java/com/baeldung/security/pkce/authserver/conf/UserDetailsConfiguration.java

@@ -0,0 +1,26 @@
+package com.baeldung.security.pkce.authserver.conf;
+
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.security.core.userdetails.User;
+import org.springframework.security.core.userdetails.UserDetails;
+import org.springframework.security.core.userdetails.UserDetailsService;
+import org.springframework.security.provisioning.InMemoryUserDetailsManager;
+
+@Configuration
+public class UserDetailsConfiguration {
+    
+    @Bean 
+    public UserDetailsService userDetailsService() {
+        // @formatter:off
+        UserDetails userDetails = User.withDefaultPasswordEncoder()
+          .username("user")
+          .password("password")
+          .roles("USER")
+          .build();
+
+        return new InMemoryUserDetailsManager(userDetails);        
+        // @formatter:on
+    }
+
+}

spring-security-modules/spring-security-pkce/pkce-auth-server/src/main/resources/application.properties

@@ -0,0 +1 @@
+server.port=8085

spring-security-modules/spring-security-pkce/pkce-auth-server/src/test/java/com/baeldung/security/pkce/SpringSecurityPkceApplicationTests.java

@@ -0,0 +1,13 @@
+package com.baeldung.security.pkce;
+
+import org.junit.jupiter.api.Test;
+import org.springframework.boot.test.context.SpringBootTest;
+
+@SpringBootTest
+class SpringSecurityPkceApplicationLiveTest {
+
+    @Test
+    void whenContextLoads_thenSuccess() {
+    }
+
+}