{"id":1375,"date":"2018-09-21T07:02:48","date_gmt":"2018-09-21T14:02:48","guid":{"rendered":"https:\/\/www.couchbase.com\/blog\/custom-token-store-spring-securtiy-oauth2\/"},"modified":"2018-09-21T07:02:48","modified_gmt":"2018-09-21T14:02:48","slug":"custom-token-store-spring-securtiy-oauth2","status":"publish","type":"post","link":"https:\/\/www.couchbase.com\/blog\/custom-token-store-spring-securtiy-oauth2\/","title":{"rendered":"How to Create a Custom Token Store for Spring-Security-Oauth2 | OAuth Part 2"},"content":{"rendered":"\n

In the previous blog post, we discussed how to configure a simple OAuth2 authentication<\/a>. However, our implementation has a major flaw in it: we are using an in-memory token store.<\/p>\n\n\n\n

In-Memory token stores should be used only during development or whether your application has a single server, as you can\u2019t easily share them between nodes and, in case of a server restart, you will lose all access tokens in it.<\/p>\n\n\n\n

Spring-security-oauth2<\/strong> already has built-in support for JDBC and JWT. However, if you need to save your tokens somewhere else, you have to create your own spring security token store. Unfortunately, implementing such a thing is not a trivial task, and I hope the following recipe will save you a couple hours of work.<\/p>\n\n\n\n

Let\u2019s start by creating the two entities responsible for storing your access and refresh token, and their respective repositories:<\/p>\n\n\n

[crayon lang=”java” decode=”true”]import lombok.Data;
\nimport org.springframework.data.annotation.Id;
\nimport org.springframework.data.couchbase.core.mapping.Document;
\nimport org.springframework.security.oauth2.common.OAuth2AccessToken;
\nimport org.springframework.security.oauth2.provider.OAuth2Authentication;<\/p>\n

@Document
\n@Data
\npublic class CouchbaseAccessToken {<\/p>\n

@Id
\n private String id;
\n private String tokenId;
\n private OAuth2AccessToken token;
\n private String authenticationId;
\n private String username;
\n private String clientId;
\n private String authentication;
\n private String refreshToken;<\/p>\n

public OAuth2Authentication getAuthentication() {
\n return SerializableObjectConverter.deserialize(authentication);
\n }<\/p>\n

public void setAuthentication(OAuth2Authentication authentication) {
\n this.authentication = SerializableObjectConverter.serialize(authentication);
\n }<\/p>\n

}
\n[\/crayon]<\/p>\n\n\n\n

\u00a0<\/p>\n\n\n

[crayon lang=”java” decode=”true”]@N1qlPrimaryIndexed
\n@ViewIndexed(designDoc = “couchbaseAccessToken”)
\npublic interface CouchbaseAccessTokenRepository extends CouchbasePagingAndSortingRepository<CouchbaseAccessToken, String> {<\/p>\n

List<CouchbaseAccessToken> findByClientId(String clientId);<\/p>\n

List<CouchbaseAccessToken> findByClientIdAndUsername(String clientId, String username);<\/p>\n

Optional<CouchbaseAccessToken> findByTokenId(String tokenId);<\/p>\n

Optional<CouchbaseAccessToken> findByRefreshToken(String refreshToken);<\/p>\n

Optional<CouchbaseAccessToken> findByAuthenticationId(String authenticationId);<\/p>\n

}
\n[\/crayon]<\/p>\n\n\n\n

\u00a0<\/p>\n\n\n

[crayon lang=”java” decode=”true”]import lombok.Data;
\nimport org.springframework.data.annotation.Id;
\nimport org.springframework.data.couchbase.core.mapping.Document;
\nimport org.springframework.security.oauth2.common.OAuth2RefreshToken;
\nimport org.springframework.security.oauth2.provider.OAuth2Authentication;<\/p>\n

@Document
\n@Data
\npublic class CouchbaseRefreshToken {<\/p>\n

@Id
\n private String id;
\n private String tokenId;
\n private OAuth2RefreshToken token;
\n private String authentication;<\/p>\n

public OAuth2Authentication getAuthentication() {
\n return SerializableObjectConverter.deserialize(authentication);
\n }<\/p>\n

public void setAuthentication(OAuth2Authentication authentication) {
\n this.authentication = SerializableObjectConverter.serialize(authentication);
\n }
\n}
\n[\/crayon]<\/p>\n\n\n\n

\u00a0<\/p>\n\n\n

[crayon lang=”java” decode=”true”]import org.springframework.data.couchbase.core.query.N1qlPrimaryIndexed;
\nimport org.springframework.data.couchbase.core.query.ViewIndexed;
\nimport org.springframework.data.couchbase.repository.CouchbasePagingAndSortingRepository;<\/p>\n

import java.util.List;
\nimport java.util.Optional;<\/p>\n

@N1qlPrimaryIndexed
\n@ViewIndexed(designDoc = “couchbaseAccessToken”)
\npublic interface CouchbaseAccessTokenRepository extends CouchbasePagingAndSortingRepository<CouchbaseAccessToken, String> {<\/p>\n

List<CouchbaseAccessToken> findByClientId(String clientId);<\/p>\n

List<CouchbaseAccessToken> findByClientIdAndUsername(String clientId, String username);<\/p>\n

Optional<CouchbaseAccessToken> findByTokenId(String tokenId);<\/p>\n

Optional<CouchbaseAccessToken> findByRefreshToken(String refreshToken);<\/p>\n

Optional<CouchbaseAccessToken> findByAuthenticationId(String authenticationId);<\/p>\n

}
\n[\/crayon]<\/p>\n\n\n\n

\u00a0<\/p>\n\n\n\n

Note that OAuth2Authentication<\/strong><\/em> is an interface, so I have no option other than serializing the object to store it in the database. Here is the class responsible for serializing\/deserializing\u00a0it:<\/p>\n\n\n

[crayon lang=”java” decode=”true”]public class SerializableObjectConverter {<\/p>\n

public static String serialize(OAuth2Authentication object) {
\n try {
\n byte[] bytes = SerializationUtils.serialize(object);
\n return Base64.encodeBase64String(bytes);
\n } catch(Exception e) {
\n e.printStackTrace();
\n throw e;
\n }
\n }<\/p>\n

public static OAuth2Authentication deserialize(String encodedObject) {
\n try {
\n byte[] bytes = Base64.decodeBase64(encodedObject);
\n return (OAuth2Authentication) SerializationUtils.deserialize(bytes);
\n } catch(Exception e) {
\n e.printStackTrace();
\n throw e;
\n }
\n }
\n[\/crayon]<\/p>\n\n\n\n

\u00a0<\/p>\n\n\n\n

Now, we can finally create our custom spring oauth2<\/span> token store. To do that, all we need is to implement the long list of methods of the org.springframework.security.oauth2.provider.token.TokenStore<\/strong><\/em>:<\/p>\n\n\n

[crayon lang=”java” decode=”true”]import org.springframework.security.oauth2.common.OAuth2AccessToken;
\nimport org.springframework.security.oauth2.common.OAuth2RefreshToken;
\nimport org.springframework.security.oauth2.provider.OAuth2Authentication;
\nimport org.springframework.security.oauth2.provider.token.AuthenticationKeyGenerator;
\nimport org.springframework.security.oauth2.provider.token.DefaultAuthenticationKeyGenerator;
\nimport org.springframework.security.oauth2.provider.token.TokenStore;<\/p>\n

import java.io.UnsupportedEncodingException;
\nimport java.math.BigInteger;
\nimport java.security.MessageDigest;
\nimport java.security.NoSuchAlgorithmException;
\nimport java.util.*;<\/p>\n

public class CouchbaseTokenStore implements TokenStore {<\/p>\n

private CouchbaseAccessTokenRepository cbAccessTokenRepository;<\/p>\n

private CouchbaseRefreshTokenRepository cbRefreshTokenRepository;<\/p>\n

public CouchbaseTokenStore(CouchbaseAccessTokenRepository cbAccessTokenRepository, CouchbaseRefreshTokenRepository cbRefreshTokenRepository){
\n this.cbAccessTokenRepository = cbAccessTokenRepository;
\n this.cbRefreshTokenRepository = cbRefreshTokenRepository;
\n }<\/p>\n

private AuthenticationKeyGenerator authenticationKeyGenerator = new DefaultAuthenticationKeyGenerator();<\/p>\n

@Override
\n public OAuth2Authentication readAuthentication(OAuth2AccessToken accessToken) {
\n return readAuthentication(accessToken.getValue());
\n }<\/p>\n

@Override
\n public OAuth2Authentication readAuthentication(String token) {
\n Optional<CouchbaseAccessToken> accessToken = cbAccessTokenRepository.findByTokenId(extractTokenKey(token));
\n if (accessToken.isPresent()) {
\n return accessToken.get().getAuthentication();
\n }
\n return null;
\n }<\/p>\n

@Override
\n public void storeAccessToken(OAuth2AccessToken accessToken, OAuth2Authentication authentication) {
\n String refreshToken = null;
\n if (accessToken.getRefreshToken() != null) {
\n refreshToken = accessToken.getRefreshToken().getValue();
\n }<\/p>\n

if (readAccessToken(accessToken.getValue()) != null) {
\n this.removeAccessToken(accessToken);
\n }<\/p>\n

CouchbaseAccessToken cat = new CouchbaseAccessToken();
\n cat.setId(UUID.randomUUID().toString()+UUID.randomUUID().toString());
\n cat.setTokenId(extractTokenKey(accessToken.getValue()));
\n cat.setToken(accessToken);
\n cat.setAuthenticationId(authenticationKeyGenerator.extractKey(authentication));
\n cat.setUsername(authentication.isClientOnly() ? null : authentication.getName());
\n cat.setClientId(authentication.getOAuth2Request().getClientId());
\n cat.setAuthentication(authentication);
\n cat.setRefreshToken(extractTokenKey(refreshToken));<\/p>\n

cbAccessTokenRepository.save(cat);
\n }<\/p>\n

@Override
\n public OAuth2AccessToken readAccessToken(String tokenValue) {
\n Optional<CouchbaseAccessToken> accessToken = cbAccessTokenRepository.findByTokenId(extractTokenKey(tokenValue));
\n if (accessToken.isPresent()) {
\n return accessToken.get().getToken();
\n }
\n return null;
\n }<\/p>\n

@Override
\n public void removeAccessToken(OAuth2AccessToken oAuth2AccessToken) {
\n Optional<CouchbaseAccessToken> accessToken = cbAccessTokenRepository.findByTokenId(extractTokenKey(oAuth2AccessToken.getValue()));
\n if (accessToken.isPresent()) {
\n cbAccessTokenRepository.delete(accessToken.get());
\n }
\n }<\/p>\n

@Override
\n public void storeRefreshToken(OAuth2RefreshToken refreshToken, OAuth2Authentication authentication) {
\n CouchbaseRefreshToken crt = new CouchbaseRefreshToken();
\n crt.setId(UUID.randomUUID().toString()+UUID.randomUUID().toString());
\n crt.setTokenId(extractTokenKey(refreshToken.getValue()));
\n crt.setToken(refreshToken);
\n crt.setAuthentication(authentication);
\n cbRefreshTokenRepository.save(crt);
\n }<\/p>\n

@Override
\n public OAuth2RefreshToken readRefreshToken(String tokenValue) {
\n Optional<CouchbaseRefreshToken> refreshToken = cbRefreshTokenRepository.findByTokenId(extractTokenKey(tokenValue));
\n return refreshToken.isPresent()? refreshToken.get().getToken() :null;
\n }<\/p>\n

@Override
\n public OAuth2Authentication readAuthenticationForRefreshToken(OAuth2RefreshToken refreshToken) {
\n Optional<CouchbaseRefreshToken> rtk = cbRefreshTokenRepository.findByTokenId(extractTokenKey(refreshToken.getValue()));
\n return rtk.isPresent()? rtk.get().getAuthentication() :null;
\n }<\/p>\n

@Override
\n public void removeRefreshToken(OAuth2RefreshToken refreshToken) {
\n Optional<CouchbaseRefreshToken> rtk = cbRefreshTokenRepository.findByTokenId(extractTokenKey(refreshToken.getValue()));
\n if (rtk.isPresent()) {
\n cbRefreshTokenRepository.delete(rtk.get());
\n }
\n }<\/p>\n

@Override
\n public void removeAccessTokenUsingRefreshToken(OAuth2RefreshToken refreshToken) {
\n Optional<CouchbaseAccessToken> token = cbAccessTokenRepository.findByRefreshToken(extractTokenKey(refreshToken.getValue()));
\n if(token.isPresent()){
\n cbAccessTokenRepository.delete(token.get());
\n }
\n }<\/p>\n

@Override
\n public OAuth2AccessToken getAccessToken(OAuth2Authentication authentication) {
\n OAuth2AccessToken accessToken = null;
\n String authenticationId = authenticationKeyGenerator.extractKey(authentication);
\n Optional<CouchbaseAccessToken> token = cbAccessTokenRepository.findByAuthenticationId(authenticationId);<\/p>\n

if(token.isPresent()) {
\n accessToken = token.get().getToken();
\n if(accessToken != null && !authenticationId.equals(this.authenticationKeyGenerator.extractKey(this.readAuthentication(accessToken)))) {
\n this.removeAccessToken(accessToken);
\n this.storeAccessToken(accessToken, authentication);
\n }
\n }
\n return accessToken;
\n }<\/p>\n

@Override
\n public Collection<OAuth2AccessToken> findTokensByClientIdAndUserName(String clientId, String userName) {
\n Collection<OAuth2AccessToken> tokens = new ArrayList<OAuth2AccessToken>();
\n List<CouchbaseAccessToken> result = cbAccessTokenRepository.findByClientIdAndUsername(clientId, userName);
\n result.forEach(e-> tokens.add(e.getToken()));
\n return tokens;
\n }<\/p>\n

@Override
\n public Collection<OAuth2AccessToken> findTokensByClientId(String clientId) {
\n Collection<OAuth2AccessToken> tokens = new ArrayList<OAuth2AccessToken>();
\n List<CouchbaseAccessToken> result = cbAccessTokenRepository.findByClientId(clientId);
\n result.forEach(e-> tokens.add(e.getToken()));
\n return tokens;
\n }<\/p>\n

private String extractTokenKey(String value) {
\n if(value == null) {
\n return null;
\n } else {
\n MessageDigest digest;
\n try {
\n digest = MessageDigest.getInstance(“MD5”);
\n } catch (NoSuchAlgorithmException var5) {
\n throw new IllegalStateException(“MD5 algorithm not available. Fatal (should be in the JDK).”);
\n }<\/p>\n

try {
\n byte[] e = digest.digest(value.getBytes(“UTF-8”));
\n return String.format(“%032x”, new Object[]{new BigInteger(1, e)});
\n } catch (UnsupportedEncodingException var4) {
\n throw new IllegalStateException(“UTF-8 encoding not available. Fatal (should be in the JDK).”);
\n }
\n }
\n }
\n}
\n[\/crayon]<\/p>\n\n\n\n

\u00a0<\/p>\n\n\n\n

Finally, we can slightly change our SecurityConfig<\/strong><\/em> class, which we have created in the previous article. It will return now an instance of CouchbaseTokenStore<\/strong><\/em> instead of InMemoryTokenStore<\/strong><\/em>:<\/p>\n\n\n

[crayon lang=”default” decode=”true”] @Autowired
\n private CouchbaseAccessTokenRepository couchbaseAccessTokenRepository;<\/p>\n

@Autowired
\n private CouchbaseRefreshTokenRepository couchbaseRefreshTokenRepository;<\/p>\n

@Bean
\n public TokenStore tokenStore() {
\n return new CouchbaseTokenStore(couchbaseAccessTokenRepository, couchbaseRefreshTokenRepository);
\n }
\n[\/crayon]<\/p>\n\n\n\n

\u00a0<\/p>\n\n\n\n

Here is the complete version of the SecurityConfig<\/strong><\/em> class:<\/p>\n\n\n

[crayon lang=”java” decode=”true”]@Configuration
\n@EnableWebMvc
\npublic class SecurityConfig extends WebSecurityConfigurerAdapter {<\/p>\n

@Autowired
\n private CustomUserDetailsService customUserDetailsService;<\/p>\n

@Autowired
\n private CouchbaseAccessTokenRepository couchbaseAccessTokenRepository;<\/p>\n

@Autowired
\n private CouchbaseRefreshTokenRepository couchbaseRefreshTokenRepository;<\/p>\n

@Autowired
\n public void globalUserDetails(AuthenticationManagerBuilder auth) throws Exception {
\n auth.userDetailsService(customUserDetailsService)
\n .passwordEncoder(encoder());
\n }<\/p>\n

@Override
\n public void configure( WebSecurity web ) throws Exception {
\n web.ignoring().antMatchers( HttpMethod.OPTIONS, “\/**” );
\n }<\/p>\n

@Override
\n protected void configure(HttpSecurity http) throws Exception {
\n http
\n .csrf().disable()
\n .authorizeRequests()
\n .antMatchers(“\/oauth\/token”).permitAll()
\n .antMatchers(“\/api-docs\/**”).permitAll()
\n .anyRequest().authenticated()
\n .and().anonymous().disable();
\n }<\/p>\n

@Bean
\n public TokenStore tokenStore() {
\n return new CouchbaseTokenStore(couchbaseAccessTokenRepository, couchbaseRefreshTokenRepository);
\n }<\/p>\n

@Bean
\n public PasswordEncoder encoder(){
\n return NoOpPasswordEncoder.getInstance();
\n }<\/p>\n

@Bean
\n public FilterRegistrationBean corsFilter() {
\n UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource();
\n CorsConfiguration config = new CorsConfiguration();
\n config.setAllowCredentials(true);
\n config.addAllowedOrigin(“*”);
\n config.addAllowedHeader(“*”);
\n config.addAllowedMethod(“*”);
\n source.registerCorsConfiguration(“\/**”, config);
\n FilterRegistrationBean bean = new FilterRegistrationBean(new CorsFilter(source));
\n bean.setOrder(0);
\n return bean;
\n }<\/p>\n

@Bean
\n @Override
\n public AuthenticationManager authenticationManagerBean() throws Exception {
\n return super.authenticationManagerBean();
\n }
\n}[\/crayon]<\/p>\n\n\n\n

\u00a0<\/p>\n\n\n\n

Well Done!\u00a0That is all we had to do.<\/p>\n\n\n\n

Your access token will look like the following in your database:<\/p>\n\n\n

[crayon lang=”plsql” decode=”true”]SELECT * from test
\nwhere _class = ‘com.bc.quicktask.standalone.model.CouchbaseAccessToken'[\/crayon]<\/p>\n\n\n

[crayon lang=”js” decode=”true”][
\n {
\n “YOUR_BUCKET_NAME”: {
\n “_class”: “com.bc.quicktask.standalone.model.CouchbaseAccessToken”,
\n “authentication”: “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”,
\n “authenticationId”: “202d6940ebd428bbe2098530c8de3958”,
\n “clientId”: “myclient”,
\n “refreshToken”: “7613ffc6480ae83beb8f0988ef9ecfcf”,
\n “token”: {
\n “_class”: “org.springframework.security.oauth2.common.DefaultOAuth2AccessToken”,
\n “additionalInformation”: {},
\n “expiration”: 1537420023432,
\n “refreshToken”: {
\n “_class”: “org.springframework.security.oauth2.common.DefaultExpiringOAuth2RefreshToken”,
\n “expiration”: 1537420023421,
\n “value”: “c44db735-403e-49d6-8a22-cfe0e29f21d3”
\n },
\n “scope”: [
\n “trust”,
\n “read”,
\n “write”
\n ],
\n “tokenType”: “bearer”,
\n “value”: “7759804c-e1c6-4d63-9520-8737f5b46dbf”
\n },
\n “tokenId”: “12b6bd9de380e1dfab348f4c15abb805”,
\n “username”: “myuser”
\n }
\n }
\n][\/crayon]<\/p>\n\n\n\n

\u00a0<\/p>\n\n\n\n

I have used\u00a0caelwinner’s<\/a> project as a reference, here is my special thanks to him.<\/p>\n\n\n\n

If you have any questions, feel free to tweet me at @deniswsrosa<\/a><\/p>\n\n\n\n

\u00a0<\/p>\n\n\n\n

\u00a0<\/p>\n","protected":false},"excerpt":{"rendered":"

In the previous blog post, we discussed how to configure a simple OAuth2 authentication. However, our implementation has a major flaw in it: we are using an in-memory token store. In-Memory token stores should be used only during development or whether your application has a single server, as you can\u2019t easily share them between nodes […]<\/p>\n","protected":false},"author":8754,"featured_media":1374,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[136,144,94],"tags":[331],"ppma_author":[287],"class_list":["post-1375","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-best-practices-and-tutorials","category-java","category-security","tag-oauth2"],"yoast_head":"\nCustom Token Store for Spring-Security-Oauth2 w\/ JDBC + JWT<\/title>\n<meta name=\"description\" content=\"Spring-security-oauth2 already has built-in support for JDBC and JWT, but you must create your own spring security token store. Find out how to do it here.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.couchbase.com\/blog\/custom-token-store-spring-securtiy-oauth2\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How to Create a Custom Token Store for Spring-Security-Oauth2 | OAuth Part 2\" \/>\n<meta property=\"og:description\" content=\"Spring-security-oauth2 already has built-in support for JDBC and JWT, but you must create your own spring security token store. Find out how to do it here.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.couchbase.com\/blog\/custom-token-store-spring-securtiy-oauth2\/\" \/>\n<meta property=\"og:site_name\" content=\"The Couchbase Blog\" \/>\n<meta property=\"article:published_time\" content=\"2018-09-21T14:02:48+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/5\/2026\/05\/oauth-part2.png\" \/>\n\t<meta property=\"og:image:width\" content=\"728\" \/>\n\t<meta property=\"og:image:height\" content=\"210\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Denis Rosa, Developer Advocate, Couchbase\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@deniswsrosa\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Denis Rosa, Developer Advocate, Couchbase\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/custom-token-store-spring-securtiy-oauth2\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/custom-token-store-spring-securtiy-oauth2\\\/\"},\"author\":{\"name\":\"Denis Rosa, Developer Advocate, Couchbase\",\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/#\\\/schema\\\/person\\\/fe3c5273e805e72a5294611a48f62257\"},\"headline\":\"How to Create a Custom Token Store for Spring-Security-Oauth2 | OAuth Part 2\",\"datePublished\":\"2018-09-21T14:02:48+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/custom-token-store-spring-securtiy-oauth2\\\/\"},\"wordCount\":1882,\"commentCount\":1,\"publisher\":{\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/custom-token-store-spring-securtiy-oauth2\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/wp-content\\\/uploads\\\/sites\\\/5\\\/2026\\\/05\\\/oauth-part2.png\",\"keywords\":[\"oauth2\"],\"articleSection\":[\"Best Practices and Tutorials\",\"Java\",\"Security\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/custom-token-store-spring-securtiy-oauth2\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/custom-token-store-spring-securtiy-oauth2\\\/\",\"url\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/custom-token-store-spring-securtiy-oauth2\\\/\",\"name\":\"Custom Token Store for Spring-Security-Oauth2 w\\\/ JDBC + JWT\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/custom-token-store-spring-securtiy-oauth2\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/custom-token-store-spring-securtiy-oauth2\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/wp-content\\\/uploads\\\/sites\\\/5\\\/2026\\\/05\\\/oauth-part2.png\",\"datePublished\":\"2018-09-21T14:02:48+00:00\",\"description\":\"Spring-security-oauth2 already has built-in support for JDBC and JWT, but you must create your own spring security token store. Find out how to do it here.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/custom-token-store-spring-securtiy-oauth2\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/custom-token-store-spring-securtiy-oauth2\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/custom-token-store-spring-securtiy-oauth2\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/wp-content\\\/uploads\\\/sites\\\/5\\\/2026\\\/05\\\/oauth-part2.png\",\"contentUrl\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/wp-content\\\/uploads\\\/sites\\\/5\\\/2026\\\/05\\\/oauth-part2.png\",\"width\":728,\"height\":210},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/custom-token-store-spring-securtiy-oauth2\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How to Create a Custom Token Store for Spring-Security-Oauth2 | OAuth Part 2\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/\",\"name\":\"The Couchbase Blog\",\"description\":\"Couchbase, the NoSQL Database\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/#organization\",\"name\":\"The Couchbase Blog\",\"url\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/wp-content\\\/uploads\\\/sites\\\/5\\\/2026\\\/06\\\/logo.svg\",\"contentUrl\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/wp-content\\\/uploads\\\/sites\\\/5\\\/2026\\\/06\\\/logo.svg\",\"width\":\"1024\",\"height\":\"1024\",\"caption\":\"The Couchbase Blog\"},\"image\":{\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/#\\\/schema\\\/person\\\/fe3c5273e805e72a5294611a48f62257\",\"name\":\"Denis Rosa, Developer Advocate, Couchbase\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f8d1f5c13115122cab89d0f229b904480bfe20d3dfbb093fe9734cda5235d419?s=96&d=mm&r=gbe0716f6199cfb09417c92cf7a8fa8d6\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f8d1f5c13115122cab89d0f229b904480bfe20d3dfbb093fe9734cda5235d419?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f8d1f5c13115122cab89d0f229b904480bfe20d3dfbb093fe9734cda5235d419?s=96&d=mm&r=g\",\"caption\":\"Denis Rosa, Developer Advocate, Couchbase\"},\"description\":\"Denis Rosa is a Developer Advocate for Couchbase and lives in Munich - Germany. He has a solid experience as a software engineer and speaks fluently Java, Python, Scala and Javascript. Denis likes to write about search, Big Data, AI, Microservices and everything else that would help developers to make a beautiful, faster, stable and scalable app.\",\"sameAs\":[\"https:\\\/\\\/x.com\\\/deniswsrosa\"],\"url\":\"https:\\\/\\\/www.couchbase.com\\\/blog\\\/author\\\/denis-rosa\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Custom Token Store for Spring-Security-Oauth2 w\/ JDBC + JWT","description":"Spring-security-oauth2 already has built-in support for JDBC and JWT, but you must create your own spring security token store. Find out how to do it here.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.couchbase.com\/blog\/custom-token-store-spring-securtiy-oauth2\/","og_locale":"en_US","og_type":"article","og_title":"How to Create a Custom Token Store for Spring-Security-Oauth2 | OAuth Part 2","og_description":"Spring-security-oauth2 already has built-in support for JDBC and JWT, but you must create your own spring security token store. Find out how to do it here.","og_url":"https:\/\/www.couchbase.com\/blog\/custom-token-store-spring-securtiy-oauth2\/","og_site_name":"The Couchbase Blog","article_published_time":"2018-09-21T14:02:48+00:00","og_image":[{"width":728,"height":210,"url":"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/5\/2026\/05\/oauth-part2.png","type":"image\/png"}],"author":"Denis Rosa, Developer Advocate, Couchbase","twitter_card":"summary_large_image","twitter_creator":"@deniswsrosa","twitter_misc":{"Written by":"Denis Rosa, Developer Advocate, Couchbase","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.couchbase.com\/blog\/custom-token-store-spring-securtiy-oauth2\/#article","isPartOf":{"@id":"https:\/\/www.couchbase.com\/blog\/custom-token-store-spring-securtiy-oauth2\/"},"author":{"name":"Denis Rosa, Developer Advocate, Couchbase","@id":"https:\/\/www.couchbase.com\/blog\/#\/schema\/person\/fe3c5273e805e72a5294611a48f62257"},"headline":"How to Create a Custom Token Store for Spring-Security-Oauth2 | OAuth Part 2","datePublished":"2018-09-21T14:02:48+00:00","mainEntityOfPage":{"@id":"https:\/\/www.couchbase.com\/blog\/custom-token-store-spring-securtiy-oauth2\/"},"wordCount":1882,"commentCount":1,"publisher":{"@id":"https:\/\/www.couchbase.com\/blog\/#organization"},"image":{"@id":"https:\/\/www.couchbase.com\/blog\/custom-token-store-spring-securtiy-oauth2\/#primaryimage"},"thumbnailUrl":"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/5\/2026\/05\/oauth-part2.png","keywords":["oauth2"],"articleSection":["Best Practices and Tutorials","Java","Security"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.couchbase.com\/blog\/custom-token-store-spring-securtiy-oauth2\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.couchbase.com\/blog\/custom-token-store-spring-securtiy-oauth2\/","url":"https:\/\/www.couchbase.com\/blog\/custom-token-store-spring-securtiy-oauth2\/","name":"Custom Token Store for Spring-Security-Oauth2 w\/ JDBC + JWT","isPartOf":{"@id":"https:\/\/www.couchbase.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.couchbase.com\/blog\/custom-token-store-spring-securtiy-oauth2\/#primaryimage"},"image":{"@id":"https:\/\/www.couchbase.com\/blog\/custom-token-store-spring-securtiy-oauth2\/#primaryimage"},"thumbnailUrl":"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/5\/2026\/05\/oauth-part2.png","datePublished":"2018-09-21T14:02:48+00:00","description":"Spring-security-oauth2 already has built-in support for JDBC and JWT, but you must create your own spring security token store. Find out how to do it here.","breadcrumb":{"@id":"https:\/\/www.couchbase.com\/blog\/custom-token-store-spring-securtiy-oauth2\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.couchbase.com\/blog\/custom-token-store-spring-securtiy-oauth2\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.couchbase.com\/blog\/custom-token-store-spring-securtiy-oauth2\/#primaryimage","url":"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/5\/2026\/05\/oauth-part2.png","contentUrl":"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/5\/2026\/05\/oauth-part2.png","width":728,"height":210},{"@type":"BreadcrumbList","@id":"https:\/\/www.couchbase.com\/blog\/custom-token-store-spring-securtiy-oauth2\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.couchbase.com\/blog\/"},{"@type":"ListItem","position":2,"name":"How to Create a Custom Token Store for Spring-Security-Oauth2 | OAuth Part 2"}]},{"@type":"WebSite","@id":"https:\/\/www.couchbase.com\/blog\/#website","url":"https:\/\/www.couchbase.com\/blog\/","name":"The Couchbase Blog","description":"Couchbase, the NoSQL Database","publisher":{"@id":"https:\/\/www.couchbase.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.couchbase.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.couchbase.com\/blog\/#organization","name":"The Couchbase Blog","url":"https:\/\/www.couchbase.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.couchbase.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/5\/2026\/06\/logo.svg","contentUrl":"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/5\/2026\/06\/logo.svg","width":"1024","height":"1024","caption":"The Couchbase Blog"},"image":{"@id":"https:\/\/www.couchbase.com\/blog\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.couchbase.com\/blog\/#\/schema\/person\/fe3c5273e805e72a5294611a48f62257","name":"Denis Rosa, Developer Advocate, Couchbase","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/f8d1f5c13115122cab89d0f229b904480bfe20d3dfbb093fe9734cda5235d419?s=96&d=mm&r=gbe0716f6199cfb09417c92cf7a8fa8d6","url":"https:\/\/secure.gravatar.com\/avatar\/f8d1f5c13115122cab89d0f229b904480bfe20d3dfbb093fe9734cda5235d419?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/f8d1f5c13115122cab89d0f229b904480bfe20d3dfbb093fe9734cda5235d419?s=96&d=mm&r=g","caption":"Denis Rosa, Developer Advocate, Couchbase"},"description":"Denis Rosa is a Developer Advocate for Couchbase and lives in Munich - Germany. He has a solid experience as a software engineer and speaks fluently Java, Python, Scala and Javascript. Denis likes to write about search, Big Data, AI, Microservices and everything else that would help developers to make a beautiful, faster, stable and scalable app.","sameAs":["https:\/\/x.com\/deniswsrosa"],"url":"https:\/\/www.couchbase.com\/blog\/author\/denis-rosa\/"}]}},"acf":[],"authors":[{"term_id":287,"user_id":8754,"is_guest":0,"slug":"denis-rosa","display_name":"Denis Rosa, Developer Advocate, Couchbase","avatar_url":"https:\/\/secure.gravatar.com\/avatar\/?s=96&d=mm&r=g","0":null,"1":"","2":"","3":"","4":"","5":"","6":"","7":"","8":""}],"_links":{"self":[{"href":"https:\/\/www.couchbase.com\/blog\/wp-json\/wp\/v2\/posts\/1375","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.couchbase.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.couchbase.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.couchbase.com\/blog\/wp-json\/wp\/v2\/users\/8754"}],"replies":[{"embeddable":true,"href":"https:\/\/www.couchbase.com\/blog\/wp-json\/wp\/v2\/comments?post=1375"}],"version-history":[{"count":0,"href":"https:\/\/www.couchbase.com\/blog\/wp-json\/wp\/v2\/posts\/1375\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.couchbase.com\/blog\/wp-json\/wp\/v2\/media\/1374"}],"wp:attachment":[{"href":"https:\/\/www.couchbase.com\/blog\/wp-json\/wp\/v2\/media?parent=1375"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.couchbase.com\/blog\/wp-json\/wp\/v2\/categories?post=1375"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.couchbase.com\/blog\/wp-json\/wp\/v2\/tags?post=1375"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/www.couchbase.com\/blog\/wp-json\/wp\/v2\/ppma_author?post=1375"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}