Spring Security is a subject that is so vast that several books may need to be written to cover if fully. However, modern applications rarely need everything that Spring Security provides to secure themselves. In this book, we will deal with a extremely popular use case to develop a Multi-Tenant Oauth2 Resource Server, a Multi-Tenant Oauth2 Client and a single Tenant Oauth2 Resource Server. While we will test the Multi-Tenant Resource Server with the Spring Boot Thymeleaf UI Client, we will use Postman to test the single Tenant Resource Server.

Today Application Security is more important than ever before. As different nations now keep cyberwarfare as a legitimate option of attacking their enemies or defending their resources, the various cryptic terminologies that float around application security need to be explained in simple English. In this book, we have described all terminologies including Oauth2 Resource Server, Roles, Grant Types, Asymmetric Encryption, and others in easily understandable concepts.

Despite Spring Security’s robust support for multi-tenancy, I did not find a good source / book that describes a range of related topics starting from Spring Security, Oauth2 Grant types, Roles, Spring Boot 3 together. While demonstrating Spring Security Oauth2 Multi-Tenant features, we will do using real life MySQL backed JPA and use modern Thymeleaf Advanced Themes to build the UI. That is why I decided to write this book. Hope you will find it quite useful.