Spring Security Exception Handling | HandlerExceptionResolver | ProblemDetail | JavaTechie

#JavaTechie #SpringBoot #SpringSecurity #ExceptionHandling
In this tutorial, we will discuss how to handle Exception in spring security
👉 Understand JWT Flow
👉 List down all possible use-case where we can expect exception
👉 Handle Authentication & Authorization Exception using RestControllerAdvice
👉 Handle Jwt Signature & Jwt expired exception using HandlerExceptionResolver
Spring boot microservice Premium course lunched with 70% off 🚀 🚀
Hurry-up & Register today itself!
COURSE LINK : javatechie5246.ongraphy.com/
PROMO CODE : JAVATECHIE50
OR use Javatechie APP
Download the JavaTechie app on your iOS or Android device from the App Store or Google Play Store.
Find the links below :
Android 🌐 : play.google.com/store/apps/de...
IOS 🌐 : apps.apple.com/in/app/javatec...
GitHub:
github.com/Java-Techie-jt/java8
Blogs:
github.com/Java-Techie-jt/sec...
Facebook:
/ javatechie
Join this channel to get access to perks:
ruclips.net/user/javatechiejoin
guys if you like this video please do subscribe now and press the bell icon to not miss any update from Java Techie
Disclaimer/Policy:
--------------------------------
Note : All uploaded content in this channel is mine and its not copied from any community ,
you are free to use source code from above mentioned GitHub account

[@gersonpineda4275]

I was looking for this solution too, I really appreciate your contribution thanks good man

[@gopisambasivarao5282]

Awesome explanation. Very informative session. God bless you, Basant.

[@ayanmohanta3251]

I was looking for this solution for so long thanks a lot man.

[@ayanmohanta3251]

Hi ,
why did you use contructor to inject the bean could you please clarify ? is there anything I am missing out that could cause an error ?
as I was able to create Bean of HandlerExceptionResolver by declaring it like this :
@Autowired
@Qualifier("handlerExceptionResolver")
private HandlerExceptionResolver exceptionResolver;

[@Javatechie]

Constructor injection is always recommended because Constructor injection in Spring is like building with LEGO blocks where you get all the pieces you need to assemble something, making it easier to build and change.

[@theparten]

you are my hero @Java Techie. You saved my day...

[@anjanx44]

What an informative topic bro.
Thanks a lot.

[@FactsNationReal]

Cracked 2 interviews by watching your videos.. I love your videos bcoz they are to the point. The knowledge that you provide is priceless.. Can't Thank you enough.. But still Thank you Sir.! 😎

[@Javatechie]

First of all many many congrats and I feel so happy for your achievements. Keep learning 👍

[@FactsNationReal]

@@Javatechie Thank you so much sir! 😊

[@sujitkumar2196]

Awesome video its very informative.thanks

[@phanimc11211]

good session, thx for ur time and effort

[@vuothanh9738]

thanks a lot. My problem is solved

[@lazarerazackikounasso8116]

Thanks a lot 😍

[@shohanur_rahman_]

Awesome.

[@khalidamerica1848]

Thank you

[@lunatichigh2896]

The instance/path field is automatically defined? That's awesome.

[@Deepakblg97]

Happy teachers day sir ❤💐

[@Javatechie]

Thank you 😊

[@abhinaygalipally9100]

I Watched all your 3.0 security really you working hard to educate people with your great content tanks!!!!!Can you please explain how to handle if you give wrong url while htting in postman we need to get response url not found

[@Javatechie]

Thank you buddy 😊.
If you are giving the wrong URL by default it will give you 404 . What else you needed here

[@abhinaygalipally9100]

Every time is getting 403 error only@@Javatechie

[@muralibunny8936]

Happy teachers day sir 🎉❤

[@Javatechie]

Thank you murali 😃. Keep learning 👍

[@hkkabir2024]

make a video using authenticationentrypoint and accessdeniedhandler

[@theparten]

i have an issue here, if my api returns a token expiration exception and i try any other api endpoints they are now returning token expiration exception unless if i restart my server. what coud be the problem...

[@arek9430]

Amazing, but I have one question: Why can't @Component annotation remain on the JwtAuthFilter class with @Autowired HandlerExceptionResolver (and its @Qualifier) inside this JwtAuthFilter instead of making @Bean out of this class with constructor injection? Both seem to work, so what is the difference?

[@Javatechie]

You can do either or . I prefer to go with bean approach but what you are asking us correct you can do that way

[@girishanker3796]

Same question. I tried this way and it worked for me.

[@tusharrai9762]

can you write a mockito unit test code for the code you wrote because in the job it's highly required, code review won't happen without it.

[@ushannilumindajayawardana1607]

I've searched this everywhere how to handle the authentication exceptions but there were no good methods. Thanks a bunch ❤❤❤. And also is there a way to handle Username not correct Password not correct as 2 exceptions, do we need to create a custom authentication manager for that or can we somehow do it in an easier way ?

[@Javatechie]

Thanks buddy but No we can't handle this whether the username is incorrect or the password because authentication failure means either one of them is incorrect

[@sandipkolhekar5847]

add one video to write test cases in security

[@mederbekakmatov1750]

👍👍👍👍👍👍👍👍

[@karishmarawat1359]

Hi Javatechie,
Can you please create video on managed worflow orchestrator nowadays it's a common requirement in any project?

[@Javatechie]

I don't have any idea on it . Will check and update

[@balag2368]

Fantastic video. Is it possible to share the source code in the description to import and try from our end.

[@Javatechie]

Yes it's already there in the video description please check

[@wassifmeskine3328]

The JwtFilter should not be registered in the spring context (that is, it will be called every time we intercept a request). It should be registered only in the spring security context. Remove the bean defnition.

[@fsdinterviewguide]

Can you please make a video on how to communicate multiple microservices using Kubernetes similar to Netflix Eurekha?

[@Javatechie]

Yes it's in my queue

[@tejastipre9787]

sir if in uri i pass worng method name or wrong method type pass then which error will come?
full authonication required to acees this resources or Norml error Get not supported if request is post or any another normal error will come?

[@Javatechie]

It will give 403 . Because filters don't know which resource you want to access

[@ramanjaneyulupasupuleti2542]

sir do a video on swagger

[@Javatechie]

Swagger already there please search with OpenApi in my channel

[@theparten]

another one is that my application doesn't seem to throw access denied exception when i use a valid token to access resources a user is not authorized. its returning 403 without body but i defined that. what am i missing here?...

[@Javatechie]

That's correct you should receive 403 only
What's the problem?

[@theparten]

@@Javatechie the body is missing of which i need to return a 403 together with a response body...

[@quannguyenviet398]

i can use the authentrypoint to handler these sir

[@ayanmohanta3251]

yes I tried but I couldn't figure out how to handle SignatureException and ExpiredJwtException

[@vinodhreddy6227]

Can you do in the cloud gateway auth rules, we are waiting, that only pending I think, thanks

[@Javatechie]

Yes vinodh , even I am not getting a proper solution for it . In one post I saw that we need to segregate service based on roles then implement that predicate in filter but not sure whether that is a feasible solution or not. Will do more research and update

[@vinodhreddy6227]

@@Javatechie thanks, I will also research will help

[@Javatechie]

Yeah sure and do let me know if you find some solution

[@thisisbabul]

how can I handle such type of error in auth2 resource server (like invalid token and expired token)?

[@theparten]

are the fundamentals not the same?...

[@ramanjaneyulupasupuleti2542]

sir for role based acess i was getting 200 when i am giving user token instead of admin token i am not getting 403 instance of AccessDeniedException is not calling remaing 3 exceptions working properly any issue

[@Javatechie]

No it should work which endpoint you are trying to access

[@ramanjaneyulupasupuleti2542]

@@Javatechie I got it sir wrong package got imported for acess denied exception

[@ramanjaneyulupasupuleti2542]

4 hrs I am trying to solve it

[@Javatechie]

No worries this kind of small mistake happened with everyone 🤪🤪🤪🤪

[@godriceeichie]

Mine is still not working

[@ramanjaneyulupasupuleti2542]

Great video sir I follwed jwt video I am getting 403 inseted of 401 I explicitly giving wrong password

[@Javatechie]

No it shouldn't be please debug your controller advice class and also make sure you are using correct http methods

[@ramanjaneyulupasupuleti2542]

No sir you just demonstrate at starting of video same like that only

[@Javatechie]

Are you giving the correct http method type in postman. Also did you add users in your database?

[@ramanjaneyulupasupuleti2542]

@@Javatechie yes sir in video you can also mention like this user should be unique other wise exception will come sir because it can't load 2 different people at a time to verify hibernate error will come myself resolved issue sir

[@soufianch8481]

sir AccessDenied not work for me

[@zawedakhtar379]

But how to authenticate I'd and secret key without token

[@Javatechie]

Which secret key 🔐 ?

[@zawedakhtar379]

Like {
"userId": "1706ceb0",
"userSecret":"1706ceb0-236dfv"
}
So there are two authentication one is by token and second is userId and userSecret but when hit the api by user I'd and userSecret then disable jwt+oauth and when hit the api by token then enable jwt+oauth, userId and userSecret given in header

[@sunderkrishnaupreti561]

Hi can you please make a video on how to debug enterprise level applications and make changes on those applications….that would be really helpful..also I have learned a lot spring security and also❤micro-services from you

[@Javatechie]

Hello Sunder , how to debug i already explained please have a look
ruclips.net/video/Kon1DGwbtzg/видео.html