Spring Boot Full Course 2026

Currently Playing: Spring JWT Authentication | JWT Internals & Stateless Security | Spring Boot Full Course #38

Spring Boot Full Course #38 In this video, we learn JWT Authentication in Spring Security from first principles and build a complete stateless authentication flow in Spring Boot. Instead of directly jumping into JWT code, we first understand the problem JWT actually solves. We start with session-based authentication and understand why JSESSIONID makes authentication stateful. From there, we move to JWT and understand how authentication can work without storing the user's authentication state in an HTTP session. We then break JWT down completely: Why HTTP does not remember authenticated users Session-based authentication and JSESSIONID Stateful vs Stateless Authentication Why JWT is needed JWT Header, Payload and Signature Base64URL Encoding vs Encryption Why JWT payload is readable Why hashing alone cannot secure a token JWT Signature and token integrity How modifying a JWT breaks its signature Symmetric vs Asymmetric Keys HS256 and HMAC-SHA256 RS256 and Private/Public Key signing JWT tampering experiment JwtEncoder and NimbusJwtEncoder Creating JWT claims using JwtClaimsSet Adding username and authorities inside JWT Creating /auth/login AuthenticationManager and DaoAuthenticationProvider Generating JWT after successful login JwtDecoder and NimbusJwtDecoder JWT signature and claim validation JwtAuthenticationConverter Mapping ROLE_USER and ROLE_ADMIN from JWT SessionCreationPolicy.STATELESS Spring Security OAuth2 Resource Server JwtAuthenticationProvider Complete JWT request lifecycle in Spring Security By the end of this video, you will understand the complete flow: Username + Password → AuthenticationManager → DaoAuthenticationProvider → Authentication → JwtEncoder → JWT and for every future request: Bearer JWT → JwtDecoder → JwtAuthenticationProvider → Authentication → SecurityContext → Authorization → Controller This video focuses on understanding how JWT authentication actually works internally, rather than simply copying JWT configuration code. JAVA Beginner to Advance Series : https://youtube.com/playlist?list=PLQEaRBV9gAFsR15tNo2QLF9d2qc-c018p&si=lNuF5lyt4nKz9Up7 Join our WhatsApp Group: https://www.whatsapp.com/channel/0029VbBF1XKF1YlMyYuPM23s Code and Notes: Github : https://github.com/adityatandon15/Spring-Framework-Full-Course We have paid courses on DSA, Web Development , Blockchain, System Design & GenAI. Join Courses: https://strikes.in/ Coder Army Website: https://coderarmy.in/#home Coder Army App: https://play.google.com/store/apps/details?id=com.rohit.negi Connect with Aditya Tandon Instagram : https://www.instagram.com/adityatandon2 LinkedIn : https://www.linkedin.com/in/adityatandon2 Twitter : https://x.com/adityatandon02 Timestamps: