Day 4 Hour 20 JWT Token Integration | Logging in The User | Spring Boot + Angular

Added: 2026-05-25

[00:01:29]Butcher.

[00:02:12]Madam Madam Mad.

[00:02:53]Yo [ __ ] I'm second now.

[00:02:57]Just start. I just started and posted a link.

[00:03:06]important authentication important.

[00:03:13]So, We have to get it, you know.

[00:03:35]I hope I like this. I'm second now.

[00:03:43]Yeah.

[00:03:45]So, we we will work on only one API today.

[00:03:52]So the API is uh localhost 8080 uh URL this URL you know I'll copy this URL that's it okay we we have to only work on this API. This API is nothing but authentication.

[00:04:33]Okay. So it is a post API.

[00:04:38]Post API that means it has a body. So body is our uh email.

[00:04:47]In this case, email is uh my email which we have registered uh on first day using register API. It's present in our DB. And then there is password.

[00:05:03]So I'm telling you my password openly.

[00:05:05]My password is password 1 2 3.

[00:05:11]Okay, this is request. Okay, I'll mark it. This is API request.

[00:05:24]Uh, bro, for Thorin, you better now mess with me, bro. For the whole day I was traveling today, I was in Oh, nice. You are in diary abil.

[00:05:41]and response y bro in di just for vacations and our response will be uh it should be 200 okay response and response is like it will have all username okay uh id role all these but along with token it will have our token and this is what we are going to add today to our response because this API response is still there. If I go and run the application, uh, if I go and run the application right now, let's see. Uh, bro, you from I'm from Pune, bro. I have no enemies, man.

[00:06:36]Peace.

[00:06:39]Uh, make some enemies, bro.

[00:06:44]Okay, the application is running. Let's go here and let's see what it gives us currently. A it gives what?

[00:07:00]What? White field. It gave 200. Okay, bro. My mom and sis wanted to shop and I'm back to the home now. They freaking handed me the load. Went in the female market. I was just cooly. Child abuse is happening.

[00:07:24]No comments on that. You are going you are going to be abused for lifetime.

[00:07:44]Post mapping login.

[00:07:46]Uh body 1 2 3 I guess. No. Yeah. 1 2 3 password password.

[00:07:56]Uh are doing job. Yes, I'm doing job.

[00:08:00]Currently working in a company. I have five years of experience mostly in the front end side and the deployment but not much on the back end. Hence I am improving my backend skills right now.

[00:08:14]It's you know uh it feels good to talk with you guys you know on daily basis is doing MCA good after BCA BCA is enough bro you can get job if your goal is to get into job then BCA is more than enough uh as per the current market you just start preparing for the jobs take at least one one year of experience job experience and then you can think of doing MCA later on without having uh actual industry experience going for masters I don't I never felt it right it's my personal opinion so yeah this was this is our current response in this response we just want to add token so adding that is not going to be chalma such now it became responsibility no I am the I'm currently in Pune name a what's your name Ajo what what's your name bro George I thought di would be crazy place but I was not up to the mark my expectation it was not up same expectations fulfill when I was in I liked some places historical places was good metro was good but So modern city what could be a di capital des it was like okay it's just another town how much AI you use in coding bro it depends for job almost 90% I'm using AI because it's it has become some repetitive task. Uh while learning something new, I try not to use AI to write code but to but use AI to ask the questions like learn the concepts, learn the steps.

[00:10:25]My name is Joe living near karat. Oh okay. Karate I live in Vimmanagar bro.

[00:10:35]There are many folks are from uh Pune.

[00:10:40]Raj is from Pune. Thorfin.

[00:10:44]Where is our discord?

[00:10:50]Should I add this link here? I'll again add this link here.

[00:11:03]It's good.

[00:11:05]Uh same feeling I got now. I think that indoor is way better than Indor is that good city or important indoor is very clean. Every every city in India should learn from indor how to screen stuck obs.

[00:11:38]People are very people have good civic sense there.

[00:12:06]The first thing that we need I was reading about is authentication manager.

[00:12:20]Okay. So, in this one, I'll write the comments. In this one, we have to first uh don't save.

[00:12:39]So we have to like first uh I'll write todo authenticate authenticate user based on uh email and password.

[00:12:57]But we will not do this. It will be done. It will be done by the spring uh spring framework security module which is authentication manager and it is bit confusing you know.

[00:13:26]So this is the first task authenticate and then if user is authenticated then generate JWT token okay and then add uh we'll pass this token to this response you token simply.

[00:14:10]Yes. Yes. Yes. I I am going in steps you know documentation.

[00:14:29]this RFC document. Next JWT custom custom JWT authentication proper to integrate authentication.

[00:14:47]Google authentication GitHub authentication.

[00:14:50]So this will be a good thing to implement 2.0 framework and how it will work.

[00:15:04]But first we'll do JWT JWT about we will go we will replace our JWT with this or 2.0 O and then we are done then this and then error handling so that it will be universal errors and for the front end also I'll do the same Friday office bro I might go early today as I'm freaking tired no problem bro lots of traveling today 6 hours of traveling and 6 hours of my mom bargaining from the shops in the market and me the uh take rest.

[00:15:51]Take rest.

[00:16:10]I'll use this to debug you know uh intelligib anti-gravity. So I'll use this to write code. Okay. What I missed in the messages I hope you guys understood what I'm trying to do here. you know mindset.

[00:16:40]Yeah.

[00:16:53]we'll tell everything about this. So this is the first thing uh it's from the spring documentation and yeah provide manager this authentication manager manager gives us some things uh this is this is it's a interface authentication manager and it has one method which is authenticate and this is what we want to use. So basically if we go to our code and we have to autowire this dependency.

[00:17:26]So auto wired paper I'll keep it aside.

[00:17:33]uh autowired or authentication manager.

[00:17:40]We need this authentication manager private uh authentication manager.

[00:17:58]Okay, it's go import. Yes, imported. See it's coming from spring framework security authentication.

[00:18:05]So it's part of spring framework security. So all the request I'm supposedly go to this while um authenticating I know that because just auto wiring it will not work.

[00:18:27]So uh this authentication manager it has authenticate method and to this uh we need to pass two things.

[00:18:37]Are you in Bangalore? No bro I'm in Pune.

[00:18:42]New member in the discord bro. Okay let me check.

[00:18:52]Hi Ajo.

[00:18:54]It's a cool name. It's a Jenzi name.

[00:18:56]Major AO bro.

[00:19:11]Hello Shri Sai we need you today.

[00:19:21]Anti-gravity. Yes. this authenticate.

[00:19:27]So how this documentation is authentication uh I'll create a tab one more and I'll ask this question how to authenticate using authentication manager in spring framework. work.

[00:20:02]Username and password.

[00:20:18]What is this method used here?

[00:20:21]Authenticate. Yeah, authentication request. What does this request have?

[00:20:25]login request. We have to do the same.

[00:20:28]What does this login request have?

[00:20:32]Uh let's search this login request.

[00:20:38]Uh login request is just username and password. Okay. So that means uh we have to just pass this uh user login DTO dot login DTO dot get email and same username and get password. So these two things we have to pass.

[00:21:05]Okay.

[00:21:07]H what's the method authenticate in the is not applicable for the argument string okay it doesn't take string then what is taking string only string and string uh aa unauthenticated no authenticate we want and we're doing something.

[00:21:39]Authenticate.

[00:21:46]Authentication request.

[00:21:50]Yeah. Authentication request.

[00:21:54]Actually, we need this first. Is it It's saying we need this first quick fix import spring framework security and uh not login request but this this two and then authentication request here. Okay, it worked. Yeah, it worked.

[00:22:37]So, but uh you know we have to create its bin. It will not work like this. So, let's run this and uh we'll see the error. We for sure know this will be an error but we want to know what's the error. So, we'll fix that.

[00:22:55]Uh, Shri Sai, have you joined the Discord server?

[00:22:59]Yeah, he's he's in the Discord, I guess.

[00:23:01]So, yeah. Uh, fail to failed authentic is uh yeah, this error we want to know.

[00:23:14]Okay. Field authentication manager in com example back controller required a bin of type organization framework security. uh that could not be found. So we need to add this as a bin. So here uh we'll add one class called application config. In this config we will add whatever the bin that we need. I'm not sure how to add that bin. So I have to go and see the documentation.

[00:23:43]Uh it's this is this is the better way to uh find how to add uh authentication manager as a bin uh in my spring spring boot application and give me the documentation URL so I'll read I'll understand I'll try to implement not just give me the code because that's what the moto is moto is not to write the code but to understand code to expose the authentication manager as a bin in spring uh boot application you can use one of the modern approaches configuration class no a configuration class.

[00:24:56]So, so, so, so, so at least this is this is what we want.

[00:25:10]Config document.

[00:25:40]Da in required authentication manager that could not be found.

[00:25:48]Consider authentication manager in your this.

[00:25:52]So public get authentication manager.

[00:25:58]Uh I can see so many likes and hearts today. Moto is to understand the code not to write it on code.

[00:26:18]Get authentication manager authentication manager. Is it a method?

[00:26:28]Uh I didn't understand this.

[00:26:33]H get authentication manager.

[00:26:36]So yeah get authentication manager you know authentication manager this public authentication manager get authentication manager.

[00:26:52]So bin configuration so that I don't know why exactly we give it configuration but I will figure it out and at the rate Uh we'll first write public authentic authentication manager uh authentication manager and parameter what does it take?

[00:28:00]How would I know?

[00:28:01]Lena authentication configuration it is like middleware how middleares works in NodeJS that's what I'm relating to o configuration all right bro got asleep early I'm super exhausted for real battery low plug in the charger yeah yeah yeah soja by soja soja you were in dill scorching heat today so you are supposed to sleep by now.

[00:28:36]I want to know where is this.

[00:28:42]Can you share me the documentation URL for this exact below code?

[00:28:56]This is very good way to search authentication to container managers authentication plus authentication configuration.

[00:29:11]Authentication manager builder get authentication manager.

[00:29:25]scratch.

[00:29:27]So he was apparently right.

[00:29:50]I have to go and search for the things.

[00:29:53]Yeah. And then uh get it.

[00:30:00]Okay. It's go this only authentication configuration.

[00:30:11]uh import this import class and then return oconfig dot get authentication manager that is what we want and uh it's giving us the importation spring framework security config. Okay.

[00:30:42]And uh throws exception. Okay. It was asking error. Yeah. Uh and handle Java exception. Yeah. Throws exception.

[00:30:54]That's basic.

[00:30:57]Okay.

[00:30:59]Now what next? Let's try and run the application again and let's see that this error is gone or not or does it need any more things. So error.

[00:31:12]Okay. So there is one more error that means we need some more things.

[00:31:19]Uh field authentication manager required the bin of this.

[00:31:30]I have added a bin.

[00:31:34]I have added a bin.

[00:31:39]Uh I have added a bin here. So what's the problem? Was application config is empty here. Aa stage changes. Now application config.

[00:31:53]Yeah, it has. Do I need any more?

[00:31:57]Uh what does this add at the rate configuration means? You know what does this add at the rate configuration means in spring boot?

[00:32:12]In spring boot the configuration annotation indicates that the class that a class is a source of bin definition.

[00:32:18]It is core part of spring's Java based configuration system. What does it mean?

[00:32:22]Declare bins. Tell Spring that the methods inside the class annotated with the bin should be executed. Instantiate, configure and initialize objects that will be managed by Spring container. AA and D the component component tells Spring read this class for bin recipes.

[00:32:47]But then he added this you know uh compiler. So I'll get this anti-gravity here and I'll use intellig only.

[00:33:22]Uh, explain me this error, buddy.

[00:33:33]Ask This error means spring boot cannot find authentication manager bin to inject into user but we added oh bin this why it's in red why it's in red I'm not Let's see.

[00:34:15]Uh, it worked. It worked. It seems it worked. Okay. So, what's what's there uh after this for us? I I don't think we need this right now. And then this response. Okay. Let's see what our API would give us now.

[00:34:32]Yeah, it give us gave us uh correct this thing. So this step is not required I'm supposing because authentication manager is doing that for us and yeah so let's rerun this.

[00:34:58]code snippet or page. Yeah, it's giving fine you know it's fine. So this part is working. So this part is not required. Verify the password matches. No. Authentication manager is doing this for us. If the user is authenticated. Yeah. Now we want most important thing get JWT token.

[00:35:25]So token h now now now now I have to open a new search okay search will come oh no here this RFC documentation is not required now zite code this much is required uh first and foremost we'll need some dependencies that I don't know which dependency uh we'll need which dependencies uh would be required to to inject JWT token in my spring boot application.

[00:36:17]So whatever the new thing that we'll implement it will start from pom.xml XML that is means injecting the dependencies.

[00:36:24]So let's see which dependencies we want.

[00:36:27]Shall I consider go fully go Linux for my webdev learning? My laptop uh is dying with Windows.

[00:36:34]It doesn't to be honest I'm in this field like five uh five years and it never mattered which OS I'm using. We are not coding for the OS or something.

[00:36:45]uh and nowadays every OS every computer is apt to do coding. So it doesn't matter if your laptop is dying then yeah you can go for Linux else it's uh not worth it get some uh kabus not so heavy OS Linux this uh meat guy is very expert in this he he's uh he's tired today he's gone so he might have suggested you some better version if you know you can Long time no see. How's your summer going? My summer is going very well bro. I don't have summer vacations though. I'm I'm here daily bro. Wignes you are here after long time. How are you?

[00:37:35]Okay these three libraries we need JWT processing library JJW the most common and this is where we get uh Maven repository. So npm angular and these are these things.

[00:37:53]So first we'll go and add JJWT API. JJWT API this and uh give me the latest version.

[00:38:05]03. So I'll copy this and I'll go to my application properties.

[00:38:12]Application properties.

[00:38:15]application properties and e not application properties pom.xml pom.xml XML you at the end we'll add this uh okay then after this we need JJW it is inter interface JJWT API is an interface uh public API for JWT library used to create and consumes JSON web tokens in Java yeah that's what we need uh then JJWT impl the actual implementation of the API runtime only Okay. I'm not sure what that mean, but yeah.

[00:39:01]Uh it's semi version download version.

[00:39:09]What's this runtime and all compile time? Runtime scope compile time.

[00:39:21]Let me refresh.

[00:39:24]Uh fine and now 3 weeks of summer, two weeks went off in a blink of an eye.

[00:39:32]Still one week left and then exams.

[00:39:36]Summer vacations exams all the exams are done or some exams.

[00:39:51]Somebody disliked the stream I just saw.

[00:39:55]Please please give my like back. Whoever just disliked the stream, please give my like back.

[00:40:07]Then what's the third dependency is uh Jackson JJWT Jackson support for JSON serialization d serialization using Jackson runtime run comp.

[00:40:37]What does this mean?

[00:40:42]Okay.

[00:40:44]Dependencies download because just because of the dependencies. Yeah. Stop and rerun mids then externals then same by summer problem. You know what's the problem with this summer vacations and then exams. We are supposed to enjoy these vacations but we can't. And we are supposed to study for the exams but we can't.

[00:41:10]So it goes very dry.

[00:41:18]Give only one 1 hour 2 hour only in morning or in the evening somewhere sometime just to study rest you you give it just for the enjoyment a worked no problem problems with our dependencies. I don't know why this scope runtime and this true 100% yeah by same oh palu it it is just an unwanted pressure on our minds throughout the vacations but yeah I have I have been through that just try to give one dedicated hour in that hour you will not do anything else just but to study and not too much of time just give 1 to two hours that's enough study for 1 to two hours focusly and Then enjoy your summer vacations.

[00:42:08]That's also important to enjoy.

[00:42:18]Now I want to know see I'll I'll write a simple code that I can think of string token and uh right now I'll write dummy and it should be given by get it get it from JWT somehow.

[00:42:52]Okay. So, how it will look, you know, I'll rerun this.

[00:42:59]Uh uh now I have to go and find the code to get token from these dependencies from JWT basically. So if I go here and do send array I didn't did this user controller and this token I have to update the user response as well. So in this user response I have to add uh private string token.

[00:43:30]Okay I don't need this I suppose.

[00:43:34]And uh now I need this. I guess I don't need this now. And in this one I'll go and add token string token because that is what we are doing here. Token token. And then this dot token is equal to token. Okay.

[00:43:58]Added here. And then in this one. So there is some shortcut that I was seeing the YouTubers were using add uh actions uh uh getters and setters. Yeah. Token.

[00:44:18]Okay. Yeah.

[00:44:21]Yeah. Now I'm expert in Java.

[00:44:24]What? Why it's crying? Found problems related to this user response may look long. Use getter setter. What?

[00:44:39]Oh, I see. I don't have to use this.

[00:44:43]Yeah, I can remove all this and I can just write getter and setter lambok. If this is correct. Two problems. If there are two problems, then I don't want it.

[00:45:04]Uh is it not crying? Yeah, it's not crying. And uh back to this. Oh, I removed the No, I didn't remove anything.

[00:45:21]Uh expected seven arguments but found six.

[00:45:27]Uh, it's saying password.

[00:45:59]Mhm.

[00:46:04]1 2 3 4 5 6 7 1 2 3 4 5 6 7 or Yeah.

[00:46:40]Bro, fix this syntax something syntax error here.

[00:46:45]Uh, fix this syntax consistency.

[00:46:52]Yeah. Should fix a daily routine as soon as possible and learn. Well, yeah.

[00:46:57]Consistency. Don't stress out too much.

[00:47:00]Keep it simple. See, life as simple as simple as possible.

[00:47:09]It [ __ ] us back because we are a lazy animal. Right now we are very lazy. Soist.

[00:47:23]I have learned this very hard way. Never keep a difficult schedule or from 6:00 to 11 a complete schedule you know no it will never work out just keep okay whenever I wake up with the cup of tea I'll read for 15 minutes that's it not more than 15 minutes then I'll scroll reals for 2 hours then after that I'll read for I study I'll study for half an hour then I'll go play cricket something something resist brain deleted.

[00:48:10]Keep as low resistance as possible in your life. Lombok requires enabling annotation processes. Enable enable sub enable bro.

[00:48:25]Uh yeah, dummy token. See this dummy token we have to replace with JWT. Now go and search, do Google, search for JWT.

[00:48:35]Now tell me how to get token from JWT in Spring Boot.

[00:48:49]Want to do as much as possible. taking time but one day paka want to do as much as possible.

[00:48:56]uh taking time but one see start from very small thing very small which example key for example fitness maybe for example fitness you want to go to gym so in your mind you are seeing some reals you know uh guys are getting fit running 10 km 5 km hitting gym 2 hours a day and you you get motivated and one day you try to go and buy subscription for the gym. Uh you go for a day or two then you stop.

[00:49:36]This happens because we have uh spiked we have spiked the expectations drastically. So it should not go like that. If you are you want to get fit just wake up at any time you want just do something uh stretching exercises at your home just for 5 to 10 minutes. Okay do this for at least 4 5 days after fifth day you will realize no I want to extend my stretching time from 10 minutes to 15 minutes to half an hour.

[00:50:09]You will start to look into video something something but you will do stretching for half an hour. After seven day you will notice okay I'm getting addicted to this it's giving me good dopamine not a spike but a good natural slightly increased dopamine so you will try to pursue it more and in that surge of uh small dopamine hit you will try to increase that dopamine so you'll try to find good options you will do cycling cricket something sports or maybe gym then after that little bit of spike when you join in uh the gym or whatever the physical activity you want you will be very consistent you will right now you will not understand what I'm trying to say but after that you will be very consistent so give your mind a doses in ch amount so that your mind will understand I'll get this many benefits Yeah.

[00:51:24]English good good habits. We have to incorporate little little good habits in our life.

[00:51:37]string bearer token get header extract token from header bro extract token from header bro I'm upset on that I see one less like here.

[00:52:21]I should have some notes. No, as a randomly, let me find my note something.

[00:52:52]I know there is JWT service that we need to create but what does it will have?

[00:53:01]So uh not this I want to generate my own JWT token and uh for that I surely need uh a JWT service. Okay.

[00:53:31]And uh I'm I'm not sure how to write that but yeah guide me in that.

[00:53:50]Hey camera prompt.

[00:53:59]What the [ __ ] again. Not this.

[00:54:09]Not this bro. I want to generate my own token.

[00:54:18]JWT token.

[00:54:20]Once user is authenticated from authentication manager. This this is the step that we have done already.

[00:54:37]Authentication manager.

[00:54:41]After that, I want to generate the token.

[00:54:49]But I know that I'll need a JWT service for that.

[00:55:02]So please is not required. So guide me to write this service and what all uh functions I'll need in that.

[00:55:24]Got it. Uh unit class that actually build science and issues token. Yeah, here is simple JWT code.

[00:55:35]uh generate token. So instead of looking into this code, uh can you share me the original documentation for this so that I can get enlightened just like Gotham Buddha.

[00:56:15]Uh I'm missing on chat or something.

[00:56:19]Uh want to do as true 100%. Like hi.

[00:56:24]The worst part is knowing how to enjoy life by taking advices. Worst part is knowing how to enjoy our life by JSON web token. Yeah, JSON web token.

[00:56:50]Uh data tracker. Uh this this this internet engineering no no collision resistant name numeric date.

[00:57:16]Uh guys, but uh if you are watching it, please do like the stream. Uh I'm putting a little bit of efforts in doing these things. So please consider liking the stream. It will really uh help and it will if you like this kind of stuff you know if you like this kind of stuff uh if you are into some kind of coding or something or you want to have a you if you want to be part of a good network then consider just liking the stream so that next time whenever I'm streaming it will come to your suggestion your YouTube homepage or shorts page and then you can join and then you can see the chats and uh Discord server. We are we are discussing so many different kinds of things in this to be some guys are into Linux, some are into web development something. So it will be a good community. So do consider joining the community and it will start from your like just try to give a like today and then if you really like after watching two three streams then do consider joining the channel by subscribing it. So, you don't have to subscribe it today. Just like the stream.

[00:58:35]Uh, my OBS is [ __ ] I guess.

[00:58:44]Yeah, live is also correct.

[00:58:59]service official repository.

[00:59:11]JJWT aims to be the easiest to use and understand. Easiest to use, bro.

[00:59:18]Library for creating and verifying JSON web tokens and JSON web keys.

[00:59:24]implementation API uh src JSON web token or two spring security class API reference.

[00:59:55]Yeah, I know today's stream is going to be boring for you.

[01:00:24]question. Why? Go.

[01:00:50]I'll probably get married by end of this year. So till then I can grind too much because just ask randomly by the end of this year. So maybe in December initialize authentication provider there is generate token method it's saying generate token.

[01:01:49]JWT generate token documentation.

[01:02:14]Uh guys, you can think of joining the discord server as well. The link is in the pinned comment.

[01:02:27]Gender token will have what it will have.

[01:02:53]Just a minute, guys.

[01:03:05]service folder.

[01:03:10]JWT service.

[01:03:14]JWT service add the red service and we'll need one method here. Uh token public string generate token.

[01:03:43]Okay.

[01:03:45]Method method.

[01:03:52]So it's saying return there is a method called generate token and it's saying use our own like hashmap new hashmap string and Nothing.

[01:04:27]Hashmap, comma, user details.

[01:04:38]User details.

[01:04:46]We have to pass the user details to this user details. Okay. Spring security may user details and then return generate token.

[01:05:20]generate token token. Okay.

[01:05:31]Okay. One is just returning us the string. But why two methods then?

[01:05:55]YouTube video.

[01:06:07]Uh yeah thanks bro but it's complete >> after that what we did we created this request this is a simple pojo to accept username and password after that what we did we need to authenticate our object so we called our existing authentication manager and we authenticated >> yeah return JWT util generate token show me this method Now this needs a authentication object. So we made use of username password authentication token over here and we pass this username and password and this guy did its job authenticated. If this authentication failed then exception will be thrown and user will get 401 >> exception. Then what we have we have implemented a JWT utility and we have added a simple function to create a JWT.

[01:06:57]>> Ah this it he created a JWT util not a service. Okay. And a string generate token. Yeah, this this is simple.

[01:07:08]Generate token string username to simple service.

[01:07:18]So we'll refer this delete delete. Delete.

[01:07:30]Uh, aut folder new package util and we need one class called JWT util.

[01:07:49]Okay. And this is just a component component import class.

[01:08:02]Okay. And in this component he created a method uh public string generate token and string username.

[01:08:16]So public string generate token and email. Yeah, in our case it's email. And then he used JWTS.Builder.

[01:08:32]JWTS.

[01:08:34]Let's figure it out on the go. So return JWTs dot JWTs.

[01:08:56]Does he have something? JWTS.Builder.

[01:09:02]I want to use JWTS dot builder here.

[01:09:14]Yeah, I got my like back. Thanks for that.

[01:09:30]Okay.

[01:09:32]What it did?

[01:10:03]JSON web token.

[01:10:21]From where does this uh JWTs is coming? No, JSON web token is not there. No, in our pom.xml.

[01:10:40]Uh it's there.

[01:10:42]So why this error? Maybe I'll reopen this.

[01:10:49]cannot resolve symbol add my own dependencies is it because of that thing scope thing scope is compile time maybe or if I I'll give it a error directly cannot resolve JSON web token cannot resolve JSON web token.

[01:11:28]I'll erase this code. Don't worry. Uh analyzed add dependency injection.

[01:11:38]Okay.

[01:11:55]The dependencies downloaded when we clean install.

[01:12:18]Anti-gravity Gemini 3.5 Pro is like ultimate JSON Compile time scope.

[01:12:46]Does anybody know what uh because keep all JWT util Stop.

[01:13:26]Your package does not exist. Antigravity clean.

[01:13:41]Let's back to the chat. Okay, there are no new chats. Uh please guys do like the stream radio. I can see it.

[01:14:02]Uh this is classic ID glitch.

[01:14:10]Where is terminal? And it's saying me to run this clean compile.

[01:14:19]Finished.

[01:14:26]Still I can see the issue.

[01:14:35]It's not getting synced.

[01:14:41]Still the same error pro.

[01:14:47]uh if you guys are joining today you can also see my like last three streams in the first stream I did actually created uh the UI in angular and it's there in my git repo you can go and check that out uh right now I'm uh I have created register API login API and now I'm doing JWT integration like the token the basic basic most possible authentication is JWT token and that's what I'm trying to integrate today so what it will Boom. It will just this was our response and in this one I have added this dummy token.

[01:15:22]Right now this dummy token will be replaced by JWT token and whatever the other APIs like this API it should work with the token like this token and it should give us the reply uh response. So that is what our goal is. So for all this to add one single line of token in this one and uh only for this login API we'll need username and password after that we will not be asked to enter a username and password that that is what authentication is okay and we'll store the token in the local storage uh on the front end side not the session cookie or something something no we'll use local storage and then I'll show you how to integrate this in the front end and we'll do musts error handling and then we are good to go.

[01:16:08]After that I will uh do a step up to integrate to replace this JWT whatever we are doing with the oath 2.0 maybe by the Google authentication time integrate though I'll do that. So starting repository if even if you want that to use this as a starting as a starter package you can clone it and use it for free and uh for my future projects also I'll use this same uh client may change client can be mobile application or uh web application or whatever it be but the starter will remain the same.

[01:16:49]Okay. So, back to my code.

[01:16:54]Yeah. Hello.

[01:16:58]I will list the contents of your back end.

[01:17:04]I need one more monitor over here so I can see my code ID and chats because chats anti-ravity.

[01:17:53]Sh user response user response.

[01:18:05]Where is response entity? This this user response.

[01:18:12]I I think we need to extend this uh user details.

[01:18:20]Extend implement.

[01:18:31]Yeah, implements it's an interface not in user details I guess in user entity we have to do this.

[01:18:58][ __ ] off. [ __ ] this [ __ ] Yeah. and then open IntelJ again.

[01:19:24]Maybe it's a glitch.

[01:20:05]Yeah, it worked.

[01:20:09]Indian jardly we are no AI policy so we'll sorry AI but I'll have to let you expiration or JWT secret.

[01:20:55]Uh now we have to build this like uh the guy was doing. So the first is set subject. He set the subject as email.

[01:21:05]Yeah, we'll also set the autocomplete then set username set uh set subject then set issued at. Yeah, set issued at this then set expiry.

[01:21:29]Uh expiry is JWT expiration. I hope it takes that.

[01:21:35]Then sign in with the key.

[01:21:40]Sign with the signature.

[01:21:46]Uh sign with key.

[01:21:53]Where is the key? Uh he has created this key. Secret key. Do we have a secret key? Yeah. Get secret key.

[01:22:03]We have a function for that. Get secret key, comma, signature. H256. And compact is like give it mean a string baby.

[01:22:25]JWT secret JWT secret. Okay.

[01:22:53]token by using all these things. We have added subject, we have added issued at, we have added sign with sign with this particular secret and this guy will accept a key only. So secret key only this will accept. So this string we need to convert to secret key by using this method by using this keys which is again coming from your JSON web token. Right?

[01:23:15]And this will just return a token for us. And another thing we have uh done is basically we have added this particular libraries in our pom.xml >> it's the JSON web token JWT token runtime. Okay.

[01:23:30]>> So this generated authentic >> code this particular library is in our pom.xml right. So this >> you know being a multilingual person it's very good that I can understand different language of uh this tutorials knowing multiple languages I know Marati Hindi English little bit of Telu so it's good I can see many like >> authentication token for for string we need to we have we have implemented a Okay. Okay. It's it's just doing this generate hot or token. Let's let's try this.

[01:24:14]Get this method. Go to the controller controller controller controller and then uh aa it already did for us.

[01:24:31]So something is missing.

[01:24:35]JWT utility and we have added a simple function to create a JWT token by using it's gave 200 but uh it gave wrong response all these things we have added subject we have added issued At we have added expiration time and we have added sign with sign with this particular secret author request. We can see now this O request we need to create right address and admin 1 2 3 4 authenticate implements user details from the spring security implement methods.

[01:25:59]Get email override this. Get password get okay get username is again give email only uh is account expired user details super account non expired it's directly true true user details super is enabled uh we have is enabled or something is active we have is active and is deleted so we can use combination of both get ro is active active active public set active active active is okay.

[01:26:36]Now if I go and rerun because response uh guys I can see huge watching but huge is just for me but please do like the stream. Yeah. Yeah it worked bro.

[01:26:56]Oh user user details is coming from spring security.

[01:27:07]This is their object spring uh framework security car and spring security framework abides by this uh interface and that's why it was trying it was not understanding what's the user uh may use okay okay by use getter and setter Isn't it?

[01:27:57]Get or set.

[01:28:19]Let's try this token to this dashboard.

[01:28:28]beer token.

[01:28:30]Ah, okay.

[01:28:33]It gave 200 means it authenticated but didn't give us the correct response. So maybe something another things are wrong.

[01:28:42]So it became so easy. Wait.

[01:28:58]See this.

[01:29:05]Okay. So, these were the changes what we made.

[01:29:21]snippet like very simple code you know uh generate token simple builder JWTs build user response token important token and then this authentication manager and then this token uh JWT generate token method.

[01:30:08]Now this method is failing. Uh it actually passed. It gave us 200. Okay.

[01:30:13]But it didn't give us the response correct response. So why that? We need to debug this.

[01:30:22]Uh it's giving us this page.

[01:30:31]Is it because the response is just a string or uh what's the issue? Yeah. API.

[01:30:46]So, let me ask copilot.

[01:30:52]Yeah, let me ask copilot sir user controller this uh why I'm getting random HTML in the API response for this simple API. Okay.

[01:31:24]The dashboard dashboard endpoints requires authentication without a JWT token. Spring securityities form login redirects you to a form security this login.

[01:31:46]And default success.

[01:31:49]Permit all or permit all.

[01:32:06]Wait, we'll see you know just a minute. I understood the because form login hence it is giving us this form login remove.

[01:32:25]It's a simple task but that I don't know.

[01:32:32]So let me look for this thing.

[01:32:37]O config may we have to have to have to remove this form login.

[01:32:44]Uh alternatively if you want dashboard to be public. No, I want dashboard to be behind the security. No, I want dashboard behind the security.

[01:33:12]It should be accessed only when token is provided.

[01:33:29]I'll I don't update, bro. Don't update, bro.

[01:33:41]Undo all.

[01:33:44]Yes. Undo.

[01:34:07]We are missing out on big piece.

[01:34:16]Hungry now.

[01:36:34]Okay. So, seems like people have left, but it's okay.

[01:36:44]Salah is best.

[01:36:57]We are missing one on the filters part.

[01:37:25]I guess filter is what I'm missing here right now.

[01:37:47]Just don't write the code. just tell me what I'm missing here because every request will come and then uh from that request we have to get okay I understood I don't need this okay so I understood the problem why our dashboard uh uh this is giving us this form even though it's 200 okay uh the problem is first we are using still this form login and second after they uh register and authenticate these two API like uh login and register API these two are not behind the security wall but after the login is successful then we are getting the token and after that every see this and after that every API should be should give us response just using this token not anything else.

[01:38:48]So whenever a request will come from that request we have to get the headers.

[01:38:54]Okay, we are passing this beer token in the for in the form of header and get the uh get the token.

[01:39:01]After that we have to validate the token, check its expiry, check subject, check everything else and if it's valid token then we have to give the request to the controller. So there should be something before the controller and that I know what comes before the controller is filter. So we have to create our own filter.

[01:39:25]Now I understood. Now the next thing to figure out is how to create uh how to create this filter.

[01:39:42]That's why he was time.

[01:39:54]Let me enjoy my amus and I'll be back. Filter add that I understood.

[01:40:03]So I can go here.

[01:40:08]Um I'll create one package and I'll write filters and oh there is a one there is filter folder already he created dumbass in this filter there is this file JWT authentication filter so what we will do we don't want any code written by the AI. So, I'm deleting this.

[01:40:50]Yes. Yes. Yes. For sure, bro. Live stream.

[01:41:16]filters filters concept.

[01:41:19]So new tab Google feature.

[01:41:24]So, what's the filters in Spring Boot?

[01:41:46]Amrest filters documentation.

[01:42:15]In the serlet API, you can add the Jakarta survey filter to apply interception style logic before and after the rest of the processing chain of filters and target serlet.

[01:42:50]There are also base. See this is very important concept if you are really here for the spring boot. Now filters is very important. Filters comes before controller.

[01:43:03]So whatever the request uh API request that we are hitting we think yeah it has dashboard. So ideally if there is no authentication for example if there is no authentication then it will go to direct controller and in controller it will find okay dashboard and it will come directly to this method. But if we write a filter the request wouldn't go to the controller first. It will go to the inter interceptor which is the filter not interceptor exactly it's a filter.

[01:43:32]it will go to filter it will filter out the request and then it will go to the controller and that is what an advantage of this. So we have to learn this and create the filter so that this um form login system will uh remove from our o login o config. So currently we have this form login. So uh the goal is to remove this because currently API response form login. So that is the problem and we will solve this problem because we likes the problem. We like the problems.

[01:44:08]Uh browsers can submit form data only through this HTTP request. Okay. But non- browser clients can also use HTTP put patch server selector methods to support form fields. Okay. The spring web module form contain filter to intercept HTTP put patch this request aa forwarded headers as request goes it's like a middleware in node it's more likely likely that because it in that also we can mutate request and responses object as request uh goes through proxies such as load balancers the whole host port scheme may change and that makes it a challenge challenge to create the links in that point. Non-standard headers code bench Yeah, bye.

[01:46:07]How to write a custom filter.

[01:46:24]Mhm. Not. I'm feeling this is not right.

[01:46:45]There is this interface.

[01:46:49]Yeah, once per request filter then only it understand key it is a filter. Okay.

[01:46:54]So at least try this.

[01:46:59]So JWT authentication filter extend once extends once uh per request filter. Okay.

[01:47:11]And then yeah, implement this whatever the [ __ ] Google extends once per filter and do filter internal HTTP request I response I filter chain and throw serlet exception system outprint incoming request aa this from this incoming request uh get method get request URI Okay, how to get uh headers from this? Because the token is available in the headers only you know.

[01:48:13]So how to do this?

[01:48:37]HP server request response.

[01:49:02]how to extract token from the headers.

[01:49:04]Let's ask this how to extract because token.

[01:49:13]So how to extract JWT token uh from the request headers here.

[01:49:27]Here. Here starts with Ber string header. This phone token validate chain chain saying use this filter chain do okay and return request response and token string token 1 2 and one space 1 2 3 4 5 6 and seven.

[01:51:22]we'll need this uh things now see I I am getting this now this token we have to decode it and after decoding this we need to verify the things out of this so how to decode this there is a way JWT io and go and if I paste this token uh I'm getting this yeah Rohit Mund subject uh expiry and there is a secret so I have to verify these three things secret uh validate expiry maybe validate issued at as well and then check if email user email I can see something on discord is there Uh yeah. Hi Ragul. Are you in the chat right now? Ragul cho bio. Good night. Good night. Good night. Good night Raj.

[01:52:26]Ragul. Ragul. Are you in the chat bro?

[01:52:30]Because I didn't see any of your text here.

[01:52:36]It's okay. back to back to this service.

[01:52:48]That's what I'm feeling.

[01:53:11]Q.

[01:53:16]So I can write a method over here.

[01:53:21]Uh maybe public not public private uh string.

[01:53:31]I'm just doing a guess work over here right now. Get email from token. Yeah, implement JWT parsing logic for this. So how how how bro? How?

[01:53:57]How can I implement this method here?

[01:54:10]Sal How to implement this method?

[01:55:04]It's saying JWTs again.

[01:55:09]Use JWTs to JWTS.

[01:55:32]It's saying key instead of this you know uh JWTs JWT already public string extract email from token. Yes.

[01:55:59]Yes bro. Yes. Parse builder. No. Parser build.

[01:56:14]Then build parse claim get body get subject.

[01:56:21]Maybe this is right. And we can use this extract email in this here.

[01:56:31]We can have like string email. Yeah, this now we have to import this.

[01:56:46]Hey, import JWT util bro.

[01:57:00]import J capital method wide. It's crying one related problem non-static method extract email cannot be referenced from a static content it's a static method static public static string is static.

[01:58:07]Hey JWT secret public static Let me see the chat.

[01:58:51]So maybe I have to check is null first and foremost.

[01:58:56]So that's that is nob brainer.

[01:58:59]If uh this email is not equal to null.

[01:59:08]Not equal to null.

[01:59:10]Okay.

[01:59:13]Authenticate condition.

[01:59:25]Let's see content.

[01:59:30]Security holder. H yeah. Security context get holder not email empty security context holder authenticated is also null. Import class.

[01:59:50]Import set authentication.

[02:00:02]Set authentication.

[02:00:04]Get authentication.

[02:00:06]Yeah. Get authentication.

[02:00:09]And if it's null then that is means it is authenticated that means user present.

[02:00:23]So yeah user details user details load user by email.

[02:00:37]Details import class.

[02:00:43]User details service. User detail service.

[02:00:50]User detail service. I is it uh is it something from the spring itself?

[02:01:03]I guess so. It is something from the spring itself. So let's try private uh final. Yeah, user service import. Yeah, it's from there. Fine. Now we got the user details. Why it's crying, bro?

[02:01:22]Aa, it needs a constructor.

[02:01:25]Okay, fine.

[02:01:28]User details service. Does it need a constructor? No, I can use this with this and this dot this. And if I remove this.

[02:01:42]Yeah. No, it needs a constructor. Okay. Okay.

[02:02:00]What else?

[02:02:07]User details request like this we are giving.

[02:02:15]Is there something else? Huh? We have to also check this token is validate or not these things. Uh validate token we have to write this.

[02:02:29]So please write this J as capital JWT util and validate more action implement this method. I'll write this method there.

[02:02:48]H now bro in this method yeah string email extract okay and return is not expired is not expired method we also need so create this method and in this one it's the time logic so date expiration parser uh date expiration set build now.

[02:03:22]Okay.

[02:03:26]Um okay, it it worked. JWT util validate then this I don't know username password it is also something from uh this cab score spring security or something so where this would come from user password authentication this is also from secure import option Uh import create class. No. Import. No.

[02:04:21]This is something from spring security.

[02:04:29]username authenticate password token uh or token and then user details credential user details get authorities okay whatever it needs it has passed and security holder get context I guess this is this is it Uh anything else that we need to do here?

[02:05:07]Let's should I try it? Uh let me check the flow again. Is it done?

[02:05:14]There is no flow. There is just this filter.

[02:05:18]Okay, let me save this and let me see will it work or not or what error it will give.

[02:05:30]Okay, no compile time error. Let's hit this endpoint.

[02:05:43]form login config.

[02:05:48]Now we don't need this. So what's the alternative for this?

[02:05:56]Uh guys, can you please like the stream?

[02:05:59]I can see people almost 100 views, 110 views so early. So 110 views and not even 10 likes. So please do like the stream.

[02:06:15]Whoever is new to the stream, please do consider liking this stream because once you like the stream, the next time the stream will come to your suggestions and even then also if you like it.

[02:06:31]Even then also if you like it then you can think of subscribing it. I'm not asking you to subscribe. Just give a give a like to this stream. And uh what my goal is I'm learning in public as you guys know whatever whatever the mistake I'll make I'll make it in public and I'm not afraid of uh making mistakes and I'll learn and next thing I want to create a good community of people around me here and uh that's what I'm doing. So I have gathered we we are a good people of good number of people here. So everybody is into some kind of a tech some kind of a learning new thing. So you can also think of joining the discord server as well. The link is in the pin chat. It's free of cost. People discuss new things there. Also do some buri if you are okay with that.

[02:07:23]So you can think of joining this but please do like the stream. That's what uh Okay. Now the error. Yeah.

[02:07:48]or config we have to remove this and form login that's for sure but after removing this line what else we have to do here Authenticated request match dashboard will be yeah any request dot authenticated not form login and then dashboard permit all bracket missing.

[02:08:31]Okay. Any request this much? So, okay.

[02:08:35]Uh there is this session creation policy something that we need here. after this uh import class. Yeah. And then after this filter then there is authentication provider.

[02:09:10]I'll say this is not with us right now.

[02:09:20]Uh and then do filter. Add filter something.

[02:09:25]Add uh what is this? Add filter before down arrow.

[02:09:34]Add filter before JWT authentication filter.

[02:09:39]Okay. Import this class. We have create we have created this class.

[02:09:48]J is capital cannot resolve.

[02:10:18]Why this is not being imported JWT authentication filter copy copy path copy option let's write manual lead then import this JWT filter and authentication provider. Yeah.

[02:11:05]So I have to inject the authentication provider. It seems auto and this. Yes, thank you for suggesting this and constructor.

[02:11:31]Yeah, it worked.

[02:11:34]Uh, what else? Then return build. Maybe that's it.

[02:11:45]Maybe that's it.

[02:11:52]Hope no errors. There is some error.

[02:11:54]Consider defining bin of type or au authentication provider.

[02:12:02]It's a clear error. It's a clear error.

[02:12:08]Authentication provider.

[02:12:20]is an interface.

[02:12:22]So config authentication provider and implements.

[02:12:42]Authentication provider.

[02:12:48]Import class.

[02:12:57]Import class spring security.

[02:13:01]And uh why this is crying?

[02:13:05]Pull method authenticate to make it abstract.

[02:13:10]Oh.

[02:13:12]authentication provider [ __ ] My mind is [ __ ] Sorry guys, I'm back.

[02:16:30]So today's topic is slightly boring it seems.

[02:16:34]So I'll get a help of music.

[02:16:47]Just a minute.

[02:17:37]Okay. So it's saying uh binai authentication provider but we used this. So let's see what is this authentication provider.

[02:17:53]So what's uh authentication provider and why I would need it's Green core computer component component spring security responsible for processing specific type of authentication request. It contains the actual logic to validate user credentials. Okay.

[02:19:08]Come on.

[02:19:14]I don't think we need this.

[02:19:19]Application config.

[02:19:22]I'll add another pin of this.

[02:19:28]Someone Let's see. Error.

[02:19:59]Oh, circular dependency.

[02:20:07]Circular dependency. Uh JW defined uh this user service or config and authentication provider or config.

[02:20:37]We can have this here and uh pass encoder.

[02:20:45]So we don't need this apparently.

[02:20:49]uh uh string password encoder.

[02:20:58]I think it's fine because it's a circular dependency issue.

[02:21:08]Yeah, I solved the circular dependency issue. Wow, great. I'm proud of myself.

[02:21:18]Uh A because null pointer exception because secret is null.

[02:21:45]Secret is null.

[02:21:48]Because we made it static.

[02:21:51]Because we made it static. We made it [ __ ] static because of this method filter.

[02:22:02]The filter is a st protected method. And in this one, we use this uh where the [ __ ] is that method?

[02:22:15]Yeah, this method.

[02:22:17]Get username extract email. This method, this shouldn't be static.

[02:22:28]This can't be static.

[02:22:37]How can I solve this problem? If because of only one method, I have to make everything static.

[02:22:59]know I can easily do cheating but that's not Right.

[02:23:29]This can't be static, you know.

[02:23:34]This method shouldn't be static.

[02:24:46]If I uh make it a service and then inject it then maybe I don't have to make it a static and that's when this error will go. So that means I have to create a service uh JWT service and not to depend on this.

[02:25:11]Okay, seems okay to me. So I'll go and create a class and I'll name it as JWT service and I'll move these things here. So first and foremost add the decorator service to this and then in this method we will Tonight I do.

[02:26:17]myself to the We met cannot resolve.

[02:27:17]This token expired.

[02:27:21]The night we met private final JWT service JWT service and do this JWT service dot Okay.

[02:27:52]Why it's crying?

[02:27:55]Uh JW might not been initialized. Add constructor parameter.

[02:28:02]JW service.

[02:28:25]Okay, this problem seems to be resolving but problems.

[02:28:33]We have problems here.

[02:28:37]Take this song. This song is like cannot find declarations to go.

[02:29:38]Part of body.

[02:29:56]solve this problem.

[02:30:23]Yeah.

[02:32:16]Fix this static full of I guess you guys are bored at this point.

[02:32:49]But we have progressed uh quite well.

[02:32:52]This was giving us 200 uh okay error. We were pass able to create the token and just this the form login was still there and I forgot to include the most important point which is authenticated provider as a bean I haven't injected it and that's where the problem lies so I have to solve this but the static non-static which issue I asked AI to please help me Sh.

[02:33:40]It seems all the problems are solved now.

[02:33:54]Yeah, it seems it is resolved.

[02:33:58]I hope it works. Yeah, it worked.

[02:34:01]It worked. Now, let's see this token.

[02:34:06]Now, let's see this token if this works.

[02:34:19]Yeah, it worked.

[02:34:55]Let's see our changes by it work here finally.

[02:35:06]It's giving us this URL. This code JWT code is finally here, bro. And this dashboard is worked. This dashboard.

[02:35:17]So, I'm happy now.

[02:35:22]Let understand the changes.

[02:35:36]Hey, what's this errors?

[02:35:41]The constructor authenticator is duplicated.

[02:35:44]Oh, my voice and all is not coming or what?

[02:36:04]I hope my stream is fine.

[02:36:21]I'll come to at the end. Let me do this. Yeah, this was the issue form login. Now we don't need this form login. We only need CSRF uh CSRF dot disable. Okay. Cross server uh site forging something. And then request matcher only register and O login should be permit all behind the security like behind the JWT token. Rest all is directly uh will be authenticated using token. So for this one permit all any request do authenticated then session management because we have to make it stateless. So session creation policy is set to stateless and then authentication provider. This is the missing piece. This was the missing piece that I added right now. I didn't added the bean for that. So I went into application config and I added a bin of this uh sorry this bin authentication provider. I already added for authentication manager but didn't add it for authentication provider because it didn't throw me an error earlier. So I did this and then authentication provider it will go to authentication provider. It does I have to see what's the internal implementation of this authentication provider now.

[02:37:56]This method I used.

[02:38:15]Okay, it worked.

[02:38:18]Yeah, it's it this is the method that we have used authenticate to authenticate the user and just that we didn't add it's been I still not sure why it asked us to do this the authentication provider uh the authentication provider user detail service password encoder and then written provider okay then add filter it will go to our filter This was again a missing piece that I added. So this is nice.

[02:38:53]I don't need comments now.

[02:39:22]This was again the best piece of code that I figured out. So because of this there was an error. Uh the spring was unable to understand what our user is.

[02:39:32]So this uh then or config yeah I'll pushing this then user controller uh will remove the unused imports from here.

[02:39:52]We don't need this commands.

[02:39:55]We don't need this.

[02:39:58]Okay. I don't need this.

[02:40:04]Okay.

[02:40:16]Here we use Lombok setter.

[02:40:34]JWT util final.

[02:41:15]I should not sing on this tree.

[02:41:32]Yeah, commit. This is the final commit for this one.

[02:41:39]I should not sync for sure.

[02:41:42]It's It's not sounding at all while I'm syncing.

[02:41:49]Okay. So it will ask me for the paraphrase again. We are done. I'll show you how it's working one more time.

[02:42:03]Yeah. So I'm happy with the progress today. So this is the login. Let's let's start with the register. No from register. So duplicate this tab and uh not duplicate this tab. Discard changes. Duplicate this tab and then go and register here not slashregister and the body. In the body we'll need for example if there is uh let me take some other person email fin uh password 1 2 3 Go.

[02:43:48]I achieve her.

[02:44:22]Okay, I'm testing it for the last time because It's working. Uh there are only two entries in the database. So I have asked it uh full name is this this this.

[02:44:33]So I'll use this not John do. I'll use some user the subscriber's name.

[02:44:45]So this is our subscriber. He's asleep now because it took a lot of time.

[02:44:52]I'll ask him to log in tomorrow.

[02:44:56]th to the rategmail.com and password is rohit 1 2 3 and send. Yeah, the user is created successfully.

[02:45:21]And now using the same with the for the login. So to finit 123 is the password.

[02:45:34]Uh Rohit 123 is the password. R capital.

[02:45:39]So R capital and it will it should give us a token. Yeah the token is here. And now using this token I have to go to dashboard. So this token should be passed in the beer token for this dashboard and send. Yes.

[02:46:32]I'm posting this in the discord just for one.

[02:46:46]It's working Thank you.

[02:47:58]I'm posting this in the discord so that the people should know I have implemented this and can get the code from the if you want to join the discord you are open to join the discord.

[02:48:14]See guys, finally implemented the JWT authentication.

[02:49:37]Okay, finally it is done. So, let me review this using the AI. I'll ask the AI to review this code.

[02:49:58]Uh can you review my code and give me suggestions for the improvement?

[02:50:11]improvement till this flow because it is done and uh what it changed till then I can play some chess.

[02:50:51]Justice.

[02:51:09]Yeah, is reviewing my code. So, meanwhile, I'll play a game of chess are What the [ __ ] Somebody sent me request.

[02:59:18]Did someone send me a request?

[03:02:50]Don't return entities directly in I got some review commands. So, let's try to solve this before.

[03:03:09]Remove unused dependencies. Auto wired user controller. Okay, let's go to user controller. What's the unused dependencies?

[03:03:23]Password encoder is unwanted dependency.

[03:03:27]This is solved.

[03:03:33]Then what's next? Uh switch auto wired field injection to constructor injection.

[03:04:37]Then what it's saying?

[03:04:40]Switch from auto wired field injection to constructor injection. Okay.

[03:04:50]Pro tip. If you use Lombok, you can just put required arcs constru constructor at the top and the class variable as private. Final and lo constructor. Java naming. I don't want to use Lombok that much right now because I want to write it by my own hands. Next comment is Java naming conventions. You are using underscores for private variables while common.

[03:05:18]Yeah, C. So yeah, I am from C# standard convention uh dictates using camel case without underscore suggestion name to user service. Okay.

[03:06:05]private why it's crying uh cannot be resolved. There's no user service.

[03:06:54]Is this correct? Uh I'm just working on the comments review comments because most of the part is done and I have pushed the code just I want to keep it as a clean code in my GitHub. So this this thing I should stop the shots uh live because the audience I'm getting is very wrong from the shots. The useless audience is coming from the shots. I shouldn't stream on the shots because those guys just care about the shots, dances, reals, but not this kind of stuff.

[03:07:37]I don't want to go in that field. So yeah, I'm going to turn off my shorts stream.

[03:08:45]Why it's giving me problem?

[03:09:04]Let's rerun this.

[03:09:09]I hope there are no errors.

[03:09:14]Yeah.

[03:09:25]Yeah, it's working.

[03:09:28]So that wasn't an issue but anti-gravity is dumb.

[03:09:38]Then what's the another comment that it gave me? Remove dependencies. I removed Java naming. Yeah, fix it. Use response entity for HTTP status code. Right now your controller methods returns row object user comma user response which defaults to HTTP 200. Okay. For rest APIs it's best practice to use response entity entity. So you can control the status code. For example creating a user should return 201 created. Okay.

[03:10:13]This I didn't know.

[03:10:17]So it should be return response entity created user and http created return 201 created aa let's let's try this It's saying do this import class import this class uh what is created user a user created This is not required. And it's saying use this.

[03:11:21]Uh what's the point?

[03:11:28]Okay.

[03:11:32]Let's try and run this what the response it gives.

[03:11:39]Let's rerun.

[03:11:42]I hope there are no errors. Yeah, no errors.

[03:11:52]Uh, anybody in the chat? I can use that name. Okay, Vignesh was there.

[03:11:58]We finish.

[03:12:13]Okay, this is created. So let's use this email.

[03:12:18]It it gave 200 only. No, what's the change then?

[03:12:25]It said return two 2011 as a response.

[03:12:30]Uh HTTP status created.

[03:12:37]It still gave me 200.

[03:12:43]Yeah, it gave me 200. I'll show this to Now I'm just fixing the errors uh like the wrong syntax and all not errors actually just good practices.

[03:13:05]So let me give this to anti-gravity and bro it's still giving me uh 200. It's still giving me 200. Okay, response.

[03:13:21]Guys, please do like the stream because I almost complete I have not almost I have completed this uh JWT integration. I have shared the screenshot on the discord.

[03:13:32]See this token we are generating using the secret and everything else and then based on that authentication another all the APIs are getting run. So we are we have successfully implemented this and this was the goal of the stream. In the next in the next one we will uh create APIs for like change of password reset password and there is a email integration that we have to do for the uh forget password URL. So we will do that and after that the UI that we created in the first stream angular UI.

[03:14:06]Uh should I show you running those that Angular UI as well? Let me I'll show you that and we will uh on the fourth or fifth day maybe we'll integrate both like front end and back end. This was the front end that we created that I created. Uh and in this one package dojson I want terminal cd front end npm start. I'll show you the UI because I'm about to end and I'll also get some idea about it.

[03:14:52]And what does anti-gravity is telling?

[03:14:54]Uh by calling get body you stripped away the HTTP headers. Acha what the change it did.

[03:15:07]Okay just that it's saying just that. So let's rerun this.

[03:15:12]But while I was writing it, it said no use get body. You know HTTP status created. Uh, is there any new chat name I can use for this? Yeah, AO. The name I like today. AO.

[03:15:29]AO.

[03:15:34]AO. And password also same.

[03:15:39]Oh, okay. Now 200 created.

[03:15:42]Okay.

[03:15:44]And then it said use the same 201 for login as well response. Okay. User response. Uh this also I didn't like. No. So user response user response is equal to this and return response.

[03:16:29]We will improve this. We'll implement two as well. response. Okay.

[03:16:38]User response is it response entity. It is response entity.

[03:16:56]Okay.

[03:17:01]Is it not okay?

[03:17:09]What I'm writing wrong here?

[03:17:17]User response.

[03:17:26]Now this is correct.

[03:17:33]What's wrong here, bro? Again, what's wrong?

[03:17:44]What's wrong here? I really like the anti-gravities AI.

[03:18:07]return.

[03:18:13]Bro, my compilers are now off.

[03:18:26]New user response. Same with So this I'll integrate with the APIs that I have created this token and this so this has become very simple for for me. Now let's push the code changes. Now I don't think this is needed.

[03:20:10]This is not needed.

[03:21:00]Okay, I'm about to end now. It's too much viewers question.

[03:21:09]So, I'll stop.

[03:21:12]I have pushed all the code to GitHub.

[03:21:15]Let's let me check my GitHub once.

[03:22:20]Oh, okay. I'm done, bro.

[03:22:25]I'm really done. I'll just paste this GitHub URL in the chat. And I'm about to sleep now.

[03:22:40]Now Sunday is not good for streaming.