Add JWT Authorization to Spring Boot
Budget: $30 – $250 USD
My existing Spring Boot web application already exposes several REST endpoints; what’s missing is a proper JWT layer so each call can be authorised securely. I need JSON Web Token generation, validation, and refresh logic wired into the current codebase, together with the usual middleware to intercept and verify every request.
Essential tasks
• Configure token creation on successful login, signed with an HMAC or RSA key (I’ll provide the secret or key pair).
• Add a filter or interceptor that checks the token on every protected endpoint and returns the correct HTTP status codes on failure.
• Create a light-weight refresh strategy—either a refresh endpoint or rolling tokens, whichever you find cleaner.
• Document the final solution: key classes, configuration snippets, and a short README so I can follow and extend the setup.
Acceptance criteria
– REST calls without a valid JWT must receive 401 responses.
– Valid tokens should allow uninterrupted access to the existing API resources.
– The application still starts with my current Maven/Gradle profile and passes its existing tests.
– All new code is clean, commented, and pushed via Git in a single merge request.
I can spin up the app locally for you; just let me know if you need any sample data or environment variables.
Essential tasks
• Configure token creation on successful login, signed with an HMAC or RSA key (I’ll provide the secret or key pair).
• Add a filter or interceptor that checks the token on every protected endpoint and returns the correct HTTP status codes on failure.
• Create a light-weight refresh strategy—either a refresh endpoint or rolling tokens, whichever you find cleaner.
• Document the final solution: key classes, configuration snippets, and a short README so I can follow and extend the setup.
Acceptance criteria
– REST calls without a valid JWT must receive 401 responses.
– Valid tokens should allow uninterrupted access to the existing API resources.
– The application still starts with my current Maven/Gradle profile and passes its existing tests.
– All new code is clean, commented, and pushed via Git in a single merge request.
I can spin up the app locally for you; just let me know if you need any sample data or environment variables.