Tag: spring-security
All the articles with the tag "spring-security".
Google login with Spring Security and React, without a token in the browser
A Spring Boot 4 + React app where Spring Security does the whole Google OAuth 2 / OpenID Connect login and keeps the tokens on the server. The browser gets an HttpOnly session cookie and a CSRF cookie, nothing else. Code, config, curl checks and the production list, following RFC 10017's backend-for-frontend design.
