4 min
Accounts, passwords and lockout
User administration, self-service and admin password changes, and a temporary lockout after repeated failed logins.
- spring-security
- security
api-design
3 posts.
5 min
Managing clients and scopes
ADMIN-only APIs for OAuth clients and a scope registry, with roles carried in the access token.
- spring-security
- oauth2
4 min
Registration, errors and dev data
A registration API with validation, one consistent error format, and demo credentials that only exist in the dev profile.
- spring-boot
- validation