Quarkus Security for Spring developers
summary
Shows how to run a Quarkus app secured with OpenID Connect using Quarkus OIDC and Quarkus REST, with Dev Services for OIDC starting a Keycloak or lightweight Vertx OIDC server for zero configuration. Demonstrates migrating a Spring Boot app to Quarkus in ~20 minutes, tests with both mocked identities and a real OIDC test client, and inspects the auth flow where security identity is stored on routing context, identity providers plug into an IdentityManager, and permissions use CDI interceptors and repeatable annotations.
AI-written summary · about
chapters (16)
- 0:00Quarkus Security intro
- 3:57Zero config approach
- 8:45Differences from Spring Security
- 9:29Reactive vs imperative security
- 12:55Handler chain and filters
- 16:05Auth flow
- 18:15Security identity and routing
- 20:14Testing with OIDC
- 22:20Auth architecture
- 24:03CDI events and context
- 26:14Handling auth events
- 27:43Security annotations
- 28:27Programmatic checks
- 31:26Method interception
- 33:18Annotation checks
- 34:00Meta annotations
related talks
33mSecuring Your Quarkus Applications
52mIntroduction to Quarkus Security
31mSecure your Quarkus Applications
46mSecure your Microservices with ZeroTrust approach
46mOAuth for Java Developers
21mReconciling Zero-Trust APIs and Developer eXperience
37mIntroduction to Verifiable Credentials
25mFine-Grained Authorization & Beyond: Mastering Keycloak Patterns in AI-infused Apps