JJWT is a pure Java implementation of JSON Web Tokens and Keys. Supports all Java 7+ JDKs and Android platforms. Provides automatic security best practices and assertions. Includes fluent API with auto-completion for IDEs
Authentication is essential for most applications. AuthModule contains AuthService and AuthController for authentication logic. UsersService encapsulates user operations and maintains hard-coded database
Resource Server requires spring-security-oauth2-resource-server and spring-security-oauth2-jose dependencies. Configuration involves specifying authorization server's issuer URI. Resource Server automatically validates JWTs during startup
OpenID Connect is an interoperable authentication protocol based on OAuth 2.0. Enables secure user verification across web, mobile, and JavaScript clients. Removes password management responsibility for users
Destinations represent target system information including URL, authentication and proxy settings. Destinations are managed separately from applications on SAP BTP. Separation enables secure authentication storage and resource location updates
Spring Security OAuth2 now uses Keycloak as Authorization Server. Resource Server requires jwk-set-uri and issuer-uri properties for token verification. Custom claims can be added to token payload using realm definition