Tag: oauth2

All the articles with the tag "oauth2".

• Google login with Spring Security and React, without a token in the browser

  11 Nov, 2026

  A Spring Boot 4 + React app where Spring Security does the whole Google OAuth 2 / OpenID Connect login and keeps the tokens on the server. The browser gets an HttpOnly session cookie and a CSRF cookie, nothing else. Code, config, curl checks and the production list, following RFC 10017's backend-for-frontend design.