From f0001c5c8d8a33729b93d8d6e10d3af40bfabed6 Mon Sep 17 00:00:00 2001 From: Kamal Wickramanayake Date: Sat, 13 Jun 2026 21:03:31 +0530 Subject: Added sample application 09-spring-security-db-authentication --- .../.gitignore | 2 + .../09-spring-security-db-authentication/README | 23 ++++++ .../09-spring-security-db-authentication/pom.xml | 68 ++++++++++++++++ .../main/java/com/example/spring/Application.java | 12 +++ .../java/com/example/spring/HomeController.java | 13 +++ .../com/example/spring/config/SecurityConfig.java | 16 ++++ .../contact/controller/ContactController.java | 34 ++++++++ .../spring/contact/controller/ContactForm.java | 45 +++++++++++ .../java/com/example/spring/user/entity/User.java | 53 +++++++++++++ .../spring/user/repository/UserRepository.java | 13 +++ .../user/service/CustomUserDetailsService.java | 25 ++++++ .../src/main/resources/application.properties | 1 + .../resources/config/application-dev.properties | 33 ++++++++ .../src/main/resources/data.sql | 2 + .../src/main/resources/static/css/main.css | 92 ++++++++++++++++++++++ .../src/main/resources/templates/contact/form.html | 30 +++++++ .../main/resources/templates/contact/result.html | 14 ++++ .../src/main/resources/templates/index.html | 18 +++++ .../src/main/resources/templates/layout/main.html | 35 ++++++++ 19 files changed, 529 insertions(+) create mode 100644 spring-boot/09-spring-security-db-authentication/.gitignore create mode 100644 spring-boot/09-spring-security-db-authentication/README create mode 100644 spring-boot/09-spring-security-db-authentication/pom.xml create mode 100644 spring-boot/09-spring-security-db-authentication/src/main/java/com/example/spring/Application.java create mode 100644 spring-boot/09-spring-security-db-authentication/src/main/java/com/example/spring/HomeController.java create mode 100644 spring-boot/09-spring-security-db-authentication/src/main/java/com/example/spring/config/SecurityConfig.java create mode 100644 spring-boot/09-spring-security-db-authentication/src/main/java/com/example/spring/contact/controller/ContactController.java create mode 100644 spring-boot/09-spring-security-db-authentication/src/main/java/com/example/spring/contact/controller/ContactForm.java create mode 100644 spring-boot/09-spring-security-db-authentication/src/main/java/com/example/spring/user/entity/User.java create mode 100644 spring-boot/09-spring-security-db-authentication/src/main/java/com/example/spring/user/repository/UserRepository.java create mode 100644 spring-boot/09-spring-security-db-authentication/src/main/java/com/example/spring/user/service/CustomUserDetailsService.java create mode 100644 spring-boot/09-spring-security-db-authentication/src/main/resources/application.properties create mode 100644 spring-boot/09-spring-security-db-authentication/src/main/resources/config/application-dev.properties create mode 100644 spring-boot/09-spring-security-db-authentication/src/main/resources/data.sql create mode 100644 spring-boot/09-spring-security-db-authentication/src/main/resources/static/css/main.css create mode 100644 spring-boot/09-spring-security-db-authentication/src/main/resources/templates/contact/form.html create mode 100644 spring-boot/09-spring-security-db-authentication/src/main/resources/templates/contact/result.html create mode 100644 spring-boot/09-spring-security-db-authentication/src/main/resources/templates/index.html create mode 100644 spring-boot/09-spring-security-db-authentication/src/main/resources/templates/layout/main.html (limited to 'spring-boot') diff --git a/spring-boot/09-spring-security-db-authentication/.gitignore b/spring-boot/09-spring-security-db-authentication/.gitignore new file mode 100644 index 0000000..3df278e --- /dev/null +++ b/spring-boot/09-spring-security-db-authentication/.gitignore @@ -0,0 +1,2 @@ +target +.vscode diff --git a/spring-boot/09-spring-security-db-authentication/README b/spring-boot/09-spring-security-db-authentication/README new file mode 100644 index 0000000..6e50354 --- /dev/null +++ b/spring-boot/09-spring-security-db-authentication/README @@ -0,0 +1,23 @@ +This sample project shows how to authenticate users based on credentials maintained in a Postgresql database. + +Passwords are hashed using Argon2. Look at the SecurityConfig.java for Argon2 input parameters used. + +To run with support for hot swap during development, use the dev profile as follows: + + mvn spring-boot:run -Dspring-boot.run.profiles=dev + +User/Pasword (as defined in resources/data.sql) + + admin: abc123 + user1: abc123 + +Key points: + +1. pom.xml dependencies +2. config/SecurityConfig.java - Can be used to modify Spring Security behavior. +3. user package Java source files + - serivice/CustomUserDetailsService.java is the key source file that defines a UserDetailsService bean that fetches user details from UserRepository (which fetches data from database using JPA) + +Misc: + +Online Argon2 hash generator: https://argon2.online/ \ No newline at end of file diff --git a/spring-boot/09-spring-security-db-authentication/pom.xml b/spring-boot/09-spring-security-db-authentication/pom.xml new file mode 100644 index 0000000..96e4a92 --- /dev/null +++ b/spring-boot/09-spring-security-db-authentication/pom.xml @@ -0,0 +1,68 @@ + + + 4.0.0 + + + com.example.spring.boot + base-config + 0.0.1-SNAPSHOT + ../00-config + + + thymeleaf-common-theme + + + + org.springframework.boot + spring-boot-starter-thymeleaf + + + + org.springframework.boot + spring-boot-starter-validation + + + + org.springframework.boot + spring-boot-starter-security + + + + + org.thymeleaf.extras + thymeleaf-extras-springsecurity6 + + + + org.springframework.boot + spring-boot-starter-data-jpa + + + + org.postgresql + postgresql + 42.7.11 + + + + + org.bouncycastle + bcprov-jdk18on + 1.84 + + + + + org.springframework.boot + spring-boot-devtools + true + + + + + \ No newline at end of file diff --git a/spring-boot/09-spring-security-db-authentication/src/main/java/com/example/spring/Application.java b/spring-boot/09-spring-security-db-authentication/src/main/java/com/example/spring/Application.java new file mode 100644 index 0000000..4393f3f --- /dev/null +++ b/spring-boot/09-spring-security-db-authentication/src/main/java/com/example/spring/Application.java @@ -0,0 +1,12 @@ +package com.example.spring; + +import org.springframework.boot.SpringApplication; +import org.springframework.boot.autoconfigure.SpringBootApplication; + +@SpringBootApplication +public class Application { + + public static void main(String[] args) throws Exception { + SpringApplication.run(Application.class, args); + } +} \ No newline at end of file diff --git a/spring-boot/09-spring-security-db-authentication/src/main/java/com/example/spring/HomeController.java b/spring-boot/09-spring-security-db-authentication/src/main/java/com/example/spring/HomeController.java new file mode 100644 index 0000000..d6ead56 --- /dev/null +++ b/spring-boot/09-spring-security-db-authentication/src/main/java/com/example/spring/HomeController.java @@ -0,0 +1,13 @@ +package com.example.spring; + +import org.springframework.stereotype.Controller; +import org.springframework.web.bind.annotation.RequestMapping; + +@Controller +public class HomeController { + + @RequestMapping("/") + public String home() { + return "index"; + } +} diff --git a/spring-boot/09-spring-security-db-authentication/src/main/java/com/example/spring/config/SecurityConfig.java b/spring-boot/09-spring-security-db-authentication/src/main/java/com/example/spring/config/SecurityConfig.java new file mode 100644 index 0000000..1f400d5 --- /dev/null +++ b/spring-boot/09-spring-security-db-authentication/src/main/java/com/example/spring/config/SecurityConfig.java @@ -0,0 +1,16 @@ +package com.example.spring.config; + +import org.springframework.context.annotation.Bean; +import org.springframework.context.annotation.Configuration; +import org.springframework.security.crypto.argon2.Argon2PasswordEncoder; +import org.springframework.security.crypto.password.PasswordEncoder; + +@Configuration +public class SecurityConfig { + + @Bean + public PasswordEncoder passwordEncoder() { + // An Argon2 password encoder with a salt length of 16 bytes, a hash length of 32 bytes, parallelism of 1, memory cost of 1 << 14 (i.e. 16MB) and 2 iterations. + return Argon2PasswordEncoder.defaultsForSpringSecurity_v5_8(); + } +} \ No newline at end of file diff --git a/spring-boot/09-spring-security-db-authentication/src/main/java/com/example/spring/contact/controller/ContactController.java b/spring-boot/09-spring-security-db-authentication/src/main/java/com/example/spring/contact/controller/ContactController.java new file mode 100644 index 0000000..6d5e9b4 --- /dev/null +++ b/spring-boot/09-spring-security-db-authentication/src/main/java/com/example/spring/contact/controller/ContactController.java @@ -0,0 +1,34 @@ +package com.example.spring.contact.controller; + +import org.springframework.stereotype.Controller; +import org.springframework.ui.Model; +import org.springframework.validation.BindingResult; +import org.springframework.web.bind.annotation.GetMapping; +import org.springframework.web.bind.annotation.ModelAttribute; +import org.springframework.web.bind.annotation.PostMapping; + +import jakarta.validation.Valid; + +@Controller +public class ContactController { + + @GetMapping("/contact") + public String showForm(Model model) { + model.addAttribute("contactForm", new ContactForm()); + return "contact/form"; + } + + @PostMapping("/contact") + public String processSubmission(@Valid @ModelAttribute ContactForm contactForm, BindingResult bindingResult, + Model model) { + if (bindingResult.hasErrors()) { + return "contact/form"; + } + + // Do whatever needed with the submitted data here. + // For example, invoke a method in a service/componet bean to send an email to contact person. + + return "contact/result"; + } + +} diff --git a/spring-boot/09-spring-security-db-authentication/src/main/java/com/example/spring/contact/controller/ContactForm.java b/spring-boot/09-spring-security-db-authentication/src/main/java/com/example/spring/contact/controller/ContactForm.java new file mode 100644 index 0000000..925999b --- /dev/null +++ b/spring-boot/09-spring-security-db-authentication/src/main/java/com/example/spring/contact/controller/ContactForm.java @@ -0,0 +1,45 @@ +package com.example.spring.contact.controller; + +import jakarta.validation.constraints.Email; +import jakarta.validation.constraints.NotBlank; +import jakarta.validation.constraints.Pattern; +import jakarta.validation.constraints.Size; + +public class ContactForm { + + @Pattern(regexp = "^[ a-zA-Z]+$", message = "Name should only include English letters") + @NotBlank(message = "Name is required") + private String name; + + @Email(message = "Must be a valid email") + @NotBlank(message = "Email is required") + private String email; + + @Size(min = 10, message = "Message must be at least 10 characters long") + private String message; + + public String getName() { + return name; + } + + public void setName(String name) { + this.name = name; + } + + public String getEmail() { + return email; + } + + public void setEmail(String email) { + this.email = email; + } + + public String getMessage() { + return message; + } + + public void setMessage(String message) { + this.message = message; + } + +} diff --git a/spring-boot/09-spring-security-db-authentication/src/main/java/com/example/spring/user/entity/User.java b/spring-boot/09-spring-security-db-authentication/src/main/java/com/example/spring/user/entity/User.java new file mode 100644 index 0000000..a8ec6d2 --- /dev/null +++ b/spring-boot/09-spring-security-db-authentication/src/main/java/com/example/spring/user/entity/User.java @@ -0,0 +1,53 @@ +package com.example.spring.user.entity; + +import java.util.ArrayList; +import java.util.Collection; + +import org.springframework.security.core.GrantedAuthority; +import org.springframework.security.core.userdetails.UserDetails; + +import jakarta.persistence.Column; +import jakarta.persistence.Entity; +import jakarta.persistence.GeneratedValue; +import jakarta.persistence.GenerationType; +import jakarta.persistence.Id; +import jakarta.persistence.Table; + +/* + @Table - Used to set the database table name explicitely. +*/ +@Entity +@Table(name="user_account") +public class User implements UserDetails { + + /* + GenerationType.IDENTITY - Auto generate value based on database's native auto increment feature + */ + @Id + @GeneratedValue(strategy = GenerationType.IDENTITY) + private Long id; + + @Column(unique = true) + private String username; + + private String password; + + /* + Roles and permissions can be represented by GrantedAuthority instances. + */ + @Override + public Collection getAuthorities() { + return new ArrayList<>(); + } + + @Override + public String getPassword() { + return password; + } + + @Override + public String getUsername() { + return username; + } + +} diff --git a/spring-boot/09-spring-security-db-authentication/src/main/java/com/example/spring/user/repository/UserRepository.java b/spring-boot/09-spring-security-db-authentication/src/main/java/com/example/spring/user/repository/UserRepository.java new file mode 100644 index 0000000..f719637 --- /dev/null +++ b/spring-boot/09-spring-security-db-authentication/src/main/java/com/example/spring/user/repository/UserRepository.java @@ -0,0 +1,13 @@ +package com.example.spring.user.repository; + +import java.util.Optional; + +import org.springframework.data.repository.ListCrudRepository; +import org.springframework.stereotype.Repository; + +import com.example.spring.user.entity.User; + +@Repository +public interface UserRepository extends ListCrudRepository { + Optional findByUsername(String username); +} diff --git a/spring-boot/09-spring-security-db-authentication/src/main/java/com/example/spring/user/service/CustomUserDetailsService.java b/spring-boot/09-spring-security-db-authentication/src/main/java/com/example/spring/user/service/CustomUserDetailsService.java new file mode 100644 index 0000000..c61649e --- /dev/null +++ b/spring-boot/09-spring-security-db-authentication/src/main/java/com/example/spring/user/service/CustomUserDetailsService.java @@ -0,0 +1,25 @@ +package com.example.spring.user.service; + +import org.springframework.security.core.userdetails.UserDetails; +import org.springframework.security.core.userdetails.UserDetailsService; +import org.springframework.security.core.userdetails.UsernameNotFoundException; +import org.springframework.stereotype.Service; + +import com.example.spring.user.repository.UserRepository; + +@Service +public class CustomUserDetailsService implements UserDetailsService { + + private final UserRepository userRepository; + + public CustomUserDetailsService(UserRepository userRepository) { + this.userRepository = userRepository; + } + + @Override + public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException { + return userRepository.findByUsername(username) + .orElseThrow(() -> new UsernameNotFoundException("User not found")); + } + +} \ No newline at end of file diff --git a/spring-boot/09-spring-security-db-authentication/src/main/resources/application.properties b/spring-boot/09-spring-security-db-authentication/src/main/resources/application.properties new file mode 100644 index 0000000..8a8c4c2 --- /dev/null +++ b/spring-boot/09-spring-security-db-authentication/src/main/resources/application.properties @@ -0,0 +1 @@ +# Look at resources/config/application-dev.properties for settings for dev profile. \ No newline at end of file diff --git a/spring-boot/09-spring-security-db-authentication/src/main/resources/config/application-dev.properties b/spring-boot/09-spring-security-db-authentication/src/main/resources/config/application-dev.properties new file mode 100644 index 0000000..50973c7 --- /dev/null +++ b/spring-boot/09-spring-security-db-authentication/src/main/resources/config/application-dev.properties @@ -0,0 +1,33 @@ +# This file contains settings used during development. +# If using Maven to run, try the following command: +# mvn spring-boot:run -Dspring-boot.run.profiles=dev + +# Web related settings + +# Disable caching for static resources +spring.web.resources.cache.period=0 +spring.thymeleaf.cache=false + +# Optional: Tell DevTools to watch changes but never restart the backend server for CSS +spring.devtools.restart.exclude=static/**,public/**,templates/** + + +# Database related settings + +spring.datasource.url=jdbc:postgresql://localhost:5432/springboot +spring.datasource.username=springboot +spring.datasource.password=abc123 + +# Create/update/drop database tables automatically? +# In production, setting value to none is better. +# Possible values: none, validate, update, create, create-drop +spring.jpa.hibernate.ddl-auto=create-drop + +# Print sql that gets executed. Good for developers. Set to false in production. +spring.jpa.show-sql=true + +# Always execute initialization scripts (resources/schema.sql, resources/data.sql) on startup +spring.sql.init.mode=always + +# Data source initialization scripts (schema.sql and data.sql) are executed after Hibernate/JPA auto-creates database tables. +spring.jpa.defer-datasource-initialization=true diff --git a/spring-boot/09-spring-security-db-authentication/src/main/resources/data.sql b/spring-boot/09-spring-security-db-authentication/src/main/resources/data.sql new file mode 100644 index 0000000..4c33897 --- /dev/null +++ b/spring-boot/09-spring-security-db-authentication/src/main/resources/data.sql @@ -0,0 +1,2 @@ +INSERT INTO user_account (username, password) VALUES ('admin','$argon2id$v=19$m=16,t=2,p=1$YnJERWhhY0RxV1hGMFNWVg$OHRvhGZx1x9KqCoVZOfUD2TkJc+HQB5SamgYejw+K2Y'); +INSERT INTO user_account (username, password) VALUES ('user1','$argon2id$v=19$m=16,t=2,p=1$YnJERWhhY0RxV1hGMFNWVg$OHRvhGZx1x9KqCoVZOfUD2TkJc+HQB5SamgYejw+K2Y'); \ No newline at end of file diff --git a/spring-boot/09-spring-security-db-authentication/src/main/resources/static/css/main.css b/spring-boot/09-spring-security-db-authentication/src/main/resources/static/css/main.css new file mode 100644 index 0000000..edd53ea --- /dev/null +++ b/spring-boot/09-spring-security-db-authentication/src/main/resources/static/css/main.css @@ -0,0 +1,92 @@ +body { + font-size: 1.125em; + font-family: "Helvetica Neue", Helvetica, Arial, sans-serif; + line-height: 1.6em; + color: rgb(32, 34, 36);; + background-color: #FFF; + padding: 10px 5px; +} + +a { + color: #1475AC; + text-decoration: none; +} + +a:hover { + text-decoration: underline; +} + +ul li { + padding-bottom: 0.5em; +} + +header { + text-align: left; + font-size: 1.2em; +} + +header h1 { + margin-top: 0; + margin-bottom: 20px; +} + +header a { + color: #000000; + text-decoration: none; +} + +.main-nav { + margin-top: 0; + padding: 0; +} + +.main-nav ul { + margin: 0; + padding : 0; + list-style-type: none; + background-color: #F6F8F8; + border: 1px solid #eee; +} + +.main-nav ul li { + margin-left: 0; + display: inline; + padding: 0 8px; + border-left: 1px solid #F9F9FF; + border-right: 1px solid #F9F9FF; +} + +.main-nav ul li:hover { + background-color: white; + border-left: 1px solid #addfff; + border-right: 1px solid #addfff; +} + +.main-nav ul li a { + color: #555; + font-weight: bold; +} + +.main-nav ul li ai:hover { + color: #000; +} + +footer { + margin-top: 20px; + font-size: 85%; + border-top: 1px solid #CCC; +} + +.form-field-container { + margin-top: 8px; + margin-bottom: 8px; +} + +.form-field-container label { + display: inline-block; + width: 5em; +} + +.form-field-container .validation-error { + color: red; +} \ No newline at end of file diff --git a/spring-boot/09-spring-security-db-authentication/src/main/resources/templates/contact/form.html b/spring-boot/09-spring-security-db-authentication/src/main/resources/templates/contact/form.html new file mode 100644 index 0000000..7debe1f --- /dev/null +++ b/spring-boot/09-spring-security-db-authentication/src/main/resources/templates/contact/form.html @@ -0,0 +1,30 @@ + + + + +
+
+
+ + +
+
+ +
+ + +
+
+ +
+ + +
+
+ + +
+
+ + + \ No newline at end of file diff --git a/spring-boot/09-spring-security-db-authentication/src/main/resources/templates/contact/result.html b/spring-boot/09-spring-security-db-authentication/src/main/resources/templates/contact/result.html new file mode 100644 index 0000000..d1bda9a --- /dev/null +++ b/spring-boot/09-spring-security-db-authentication/src/main/resources/templates/contact/result.html @@ -0,0 +1,14 @@ + + + + +
+

We received your message.

+ +

+ + Try again +

+ + + \ No newline at end of file diff --git a/spring-boot/09-spring-security-db-authentication/src/main/resources/templates/index.html b/spring-boot/09-spring-security-db-authentication/src/main/resources/templates/index.html new file mode 100644 index 0000000..dce7a4e --- /dev/null +++ b/spring-boot/09-spring-security-db-authentication/src/main/resources/templates/index.html @@ -0,0 +1,18 @@ + + + + +
+

Hello, Username Placeholder!

+ +

Hello, [[${#authentication.name}]]!

+ +

This is the home page content.

+ +

Use the navigation links to explore other pages.

+
+ + + \ No newline at end of file diff --git a/spring-boot/09-spring-security-db-authentication/src/main/resources/templates/layout/main.html b/spring-boot/09-spring-security-db-authentication/src/main/resources/templates/layout/main.html new file mode 100644 index 0000000..5f988d0 --- /dev/null +++ b/spring-boot/09-spring-security-db-authentication/src/main/resources/templates/layout/main.html @@ -0,0 +1,35 @@ + + + + + Base title not shown + + + + + +
+

ABC App

+
+ + + +

Page content area title

+ + + + + + + \ No newline at end of file -- cgit v1.2.3