{"id":60699,"date":"2016-10-17T09:48:45","date_gmt":"2016-10-17T06:48:45","guid":{"rendered":"http:\/\/www.javacodegeeks.com\/?p=60699"},"modified":"2016-10-24T11:04:09","modified_gmt":"2016-10-24T08:04:09","slug":"single-sign-java-20-minutes-spring-boot-heroku","status":"publish","type":"post","link":"https:\/\/www.javacodegeeks.com\/2016\/10\/single-sign-java-20-minutes-spring-boot-heroku.html","title":{"rendered":"Single Sign-on for Java in 20 Minutes with Spring Boot and Heroku"},"content":{"rendered":"

Building Identity Management, including authentication and authorization? Try Stormpath! Our REST API and robust Java SDK support<\/a> can eliminate your security risk and can be implemented in minutes. Sign up<\/a>, and never build auth again!<\/span><\/p>\n

Massive Update<\/h2>\n

The code I originally wrote for this post is more suited to non-Spring Boot environments.<\/p>\n

Stormpath\u2019s existing Spring Boot integration for its IDSite<\/a> service makes writing code for it a snap. It takes advantage of all the auto configuration that Spring Boot has to offer.<\/p>\n

If your new to this post, read on. If you\u2019ve read it before, jump on down to the Update Your Spring Boot Webapp<\/a> section. You\u2019ll see that the RestrictedController<\/code> has been reduced from 40 lines down to 15 and from 4 methods down to 1.<\/p>\n

The Main Event \u2013 Easy Single Sign-on<\/h2>\n

I love how Java keeps reinventing itself to stay current and relevant (I can hear all my Node.js and Ruby friends groaning). The ecosystem that supports Java is keeping pace with new developments as well. Today, it\u2019s as easy today to build, test and deploy a rich Java web app as quickly as in Python or Node.js (more groans).<\/p>\n

One piece of that is Spring Boot, which makes building and launching a Java webapp in minutes a reality. Heroku\u2019s focus on Java support also speeds things along.<\/p>\n

Finally, Stormpath means developers don\u2019t have to build authentication and authorization workflows. Stormpath\u2019s identity API and single sign-on functionality (via IDSite<\/a>) provide out-of-the-box account registration, login, email workflows and single sign-on across applications. These flows include default forms and views, all of which are customizable.<\/p>\n

In this post, we will put all that together and get the added bonus of single sign-on<\/a> across your applications \u2013 all within 20 minutes.<\/p>\n

Read on \u2013 tick tock!
\n<\/span><\/p>\n

Here are the prerequisites you need for this tutorial:<\/p>\n