<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <channel>
    <title>DEV Community: thecloudgarage</title>
    <description>The latest articles on DEV Community by thecloudgarage (@thecloudgarage).</description>
    <link>https://dev.to/thecloudgarage</link>
    <image>
      <url>https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F646997%2Faf2ad113-32e4-4552-9e09-6d818e199c40.png</url>
      <title>DEV Community: thecloudgarage</title>
      <link>https://dev.to/thecloudgarage</link>
    </image>
    <atom:link rel="self" type="application/rss+xml" href="https://dev.to/feed/thecloudgarage"/>
    <language>en</language>
    <item>
      <title>OAuth2.0 M2M with OKTA, Spring Boot &amp; Boomi Integration</title>
      <dc:creator>thecloudgarage</dc:creator>
      <pubDate>Thu, 10 Jun 2021 07:21:02 +0000</pubDate>
      <link>https://dev.to/thecloudgarage/oauth2-0-m2m-with-okta-spring-boot-boomi-integration-33f7</link>
      <guid>https://dev.to/thecloudgarage/oauth2-0-m2m-with-okta-spring-boot-boomi-integration-33f7</guid>
      <description>&lt;h2&gt;
  
  
  Objective
&lt;/h2&gt;

&lt;p&gt;An efficient search API based on Spring boot which is protected via OAuth2.0. Use &lt;strong&gt;OKTA OAuth2.0 Machine2Machine&lt;/strong&gt; instead of Web based OAuth2.0. The m2m method implements &lt;strong&gt;Client Credentials flow&lt;/strong&gt; and is recommended for server-side (AKA confidential) client applications with no end user, which normally describes machine-to-machine communication.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Additionally&lt;/strong&gt; build a &lt;strong&gt;Boomi&lt;/strong&gt; based HTTP client that gets authenticated data from the Spring boot API &lt;strong&gt;(OPTIONAL)&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Example:&lt;/strong&gt; An internal API (Boomi HTTP client or CURL) calling another third party API (Spring boot) which is secured via OKTA. Your client application/API needs to securely store its Client ID and secret and pass those to Okta in exchange for an access token. At a high-level, the flow only has four steps:&lt;/p&gt;

&lt;p&gt;&lt;a href="https://res.cloudinary.com/practicaldev/image/fetch/s--UwUEWTwc--/c_limit%2Cf_auto%2Cfl_progressive%2Cq_auto%2Cw_880/https://user-images.githubusercontent.com/39495790/121356158-3cd29d80-c94e-11eb-9ea4-adb639f7a40b.png" class="article-body-image-wrapper"&gt;&lt;img src="https://res.cloudinary.com/practicaldev/image/fetch/s--UwUEWTwc--/c_limit%2Cf_auto%2Cfl_progressive%2Cq_auto%2Cw_880/https://user-images.githubusercontent.com/39495790/121356158-3cd29d80-c94e-11eb-9ea4-adb639f7a40b.png" alt="image"&gt;&lt;/a&gt;&lt;/p&gt;

&lt;h3&gt;
  
  
  Prequisites
&lt;/h3&gt;

&lt;ul&gt;
&lt;li&gt;Basic familiarity with Spring Boot, Postgresql, docker, Boomi, OAuth2 workflows&lt;/li&gt;
&lt;li&gt;Docker host with docker-compose installed and access to Internet&lt;/li&gt;
&lt;li&gt;Boomi Atomsphere account (optional in case you want to spin up the Client API)&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;&lt;strong&gt;Continue reading on GitHub...&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;&lt;a href="https://github.com/thecloudgarage/springboot-examples/blob/main/validated/springboot-efficient-search-rest-api-with-okta-m2m/README.md"&gt;https://github.com/thecloudgarage/springboot-examples/blob/main/validated/springboot-efficient-search-rest-api-with-okta-m2m/README.md&lt;/a&gt;&lt;/p&gt;

</description>
      <category>springboot</category>
      <category>boomi</category>
      <category>okta</category>
      <category>postgres</category>
    </item>
  </channel>
</rss>
