Authentication and Authorization using jwt token include refresh token in Spring Boot

How JWT security works

Authentication Logic Flowchart

Authentication Logic

• User sends username and password to the server
• Server validates the credentials and sends back an Access Token and Refresh Token
• User stores the Access Token in memory and Refresh Token in a cookie
• User sends the Access Token in the Authorization header of every request
• Server validates the Access Token and sends back the response
• If the Access Token is expired, user sends the Refresh Token in the Cookie
• Server validates the Refresh Token and sends back a new Access Token and Refresh Token

Technologies

• Java 20
• Spring Boot 3.0.6
• Spring Data JPA
• Spring Security
• IO JSON Web Token
• PostgreSQL Database
• Lombok
• Restful API
• Maven