inflearn logo

Social Login and Secure JWT Login Implemented with Spring Boot and React

This course is a systematic learning process for general login, social login, and JWT-based token authentication using Spring Boot 3, Spring Security 6, and React. It covers building OAuth2 social login and security-enhanced JWT authentication systems in both MPA and SPA environments, while addressing overall security practices such as XSS/CSRF countermeasures, HTTPS application, token reissue and revocation strategies, and secure secret key management. You will practice configuring production-level environments, including building and deploying via AWS and performance optimization using Redis. Through the completed project source code provided in the course, you can understand the entire login flow and apply it directly to real-world practical work.

7 learners are taking this course

Level Intermediate

Course period Unlimited

React
React
Java
Java
Spring Boot
Spring Boot
JPA
JPA
Spring Security
Spring Security
React
React
Java
Java
Spring Boot
Spring Boot
JPA
JPA
Spring Security
Spring Security

What you will gain after the course

  • Implementation of an integrated authentication system for general and social login

  • Building a Secure Authentication System Based on Spring Boot 3 and Spring Security 6

  • Social login integration for Google, Naver, Kakao, and GitHub

  • Implementing authentication processing methods suitable for MPA and SPA environments

  • Acquire defense techniques against major web security attacks such as XSS and CSRF

  • Implementation of Refresh Token Reissue and Blacklist-based Token Revocation

  • Hands-on practice on applying HTTPS, AWS deployment, and optimizing token revocation performance using Redis.

  • Acquire full-stack project source code that can be immediately applied to real-world practice.

📢 Course Introduction

I created this course to teach login systems and security technologies that can be immediately applied in practice within the rapidly changing web technology environment. Beyond simple login implementation, the goal is to cover everything from the integrated implementation of standard and social logins to the design of production-level security architectures.

In this course, we will use Spring Boot 3, Spring Security 6, and React to implement OAuth2 social login and JWT-based token authentication in both MPA and SPA environments. We will cover core security concepts through actual code—including HTTPS application, XSS and CSRF defense, and token reissue and revocation strategies—and progress to building and deploying in an AWS environment, managing secret keys via AWS Secrets Manager, and optimizing authentication performance using Redis.

Upon completing this course, you will be able to personally develop social login and security-enhanced JWT authentication systems, and integrate them with React-based SPAs to build professional-grade web services. Through this, you will gain full-stack security project experience covering backend, frontend, and cloud environments, and obtain a finished result that can be immediately applied to real-world tasks or your portfolio.

✨ Key Highlights of the Course

  • You will implement an integrated login system that includes standard login as well as four social login options: Google, Naver, Kakao, and GitHub.

  • You will design and implement a production-level JWT authentication system yourself, going beyond simple theory.

  • You can comparatively learn login implementation methods in both MPA (Thymeleaf) and SPA (React) environments.

  • Practice core security technologies such as XSS, CSRF, HTTPS, and token reissue/revocation with actual code.

  • Understand security issues based on JWT token storage locations (localStorage, HttpOnly cookies, etc.) and handle them securely.

  • Directly design and implement Refresh Token reissue strategies in three different ways.

  • Experience the cloud environment firsthand, from AWS build and deployment to Redis performance optimization.

  • Utilize the latest technology stack, including Spring Boot 3, Spring Security 6, React, JPA, MySQL, and Redis.

  • The example source code from the lecture can be applied directly to real-world production environments.

📘 What you will learn in this course

This course is structured with a focus on practice rather than theory, and emphasizes developing the ability to implement authentication systems that can be used immediately in real-world projects.

1. Integrated implementation of standard login and social login

Implement a standard ID/password-based login function and integrate four types of social logins: Google, Naver, Kakao, and GitHub. You will practice the entire process from registering OAuth2 providers to structuring integrated processing logic, and unify them into a single authentication system by customizing Spring Security configurations and authentication flows.

2. Authentication Processing in MPA and SPA Environments

We will implement login processing in an MPA (Thymeleaf-based) web application and JWT token authentication in an SPA (React-based) application, respectively, while comparatively learning the differences between the two environments and the appropriate authentication handling methods for each.

3. JWT-Based Authentication and Security Hardening

Understand the concepts and operating principles of JWT, and learn core security concepts such as the difference between Bearer and cookie authentication, and token signing and verification methods through hands-on practice. Experience XSS and CSRF attacks firsthand, implement defense techniques, and analyze security differences based on token storage locations (localStorage, HttpOnly cookies, memory). Design and implement Refresh Token reissue strategies in three different ways, and implement blacklist-based token revocation strategies in both RDB and Redis environments.

4. Configuring an AWS-based Practical Environment and Project Completion

We will build a deployment architecture that separates the backend and frontend using AWS RDS, EC2, S3, CloudFront, Route 53, and ELB. You will learn how to apply HTTPS to both servers and securely manage secret keys using AWS Secrets Manager and Parameter Store. Finally, we will complete a security-enhanced full-stack project based on React + Spring Boot + JWT.

Recommended for
these people

Who is this course right for?

  • A web developer who wants to implement an integrated system for both regular and social login.

  • Java developers who want to apply Spring Boot 3 and Spring Security 6 to real-world projects.

  • A frontend developer who wants to understand the JWT authentication structure and integrate it with React.

  • Developers who want to learn web security techniques such as XSS, CSRF, and HTTPS through actual code.

  • A developer who wants to gain experience in AWS deployment and building authentication systems using Redis.

  • A job seeker who wants to add a security-focused full-stack project to their portfolio.

Need to know before starting?

  • Understanding basic Java syntax and object-oriented programming concepts

  • Experience in Spring Boot basic structure and REST API development

  • Basic understanding of React's component structure and state management

  • Understanding concepts such as the HTTP protocol, requests/responses, and cookies

  • (Optional) Basic concepts of JPA, Spring Security, OAuth2, and JWT

Hello
This is oncoding

447

Learners

7

Reviews

19

Answers

4.7

Rating

4

Courses

Curriculum

All

158 lectures ∙ (29hr 20min)

Published: 
Last updated: 

Reviews

Not enough reviews.
Please write a valuable review that helps everyone!

oncoding's other courses

Check out other courses by the instructor!

Similar courses

Explore other courses in the same field!

Limited time deal

$36,300.00

70%

$93.50