How to debug Spring Security Oath2 and Jwt for knowing how it work

Question

I have successfully implemented Spring Boot Oath2 and Jwt in my Spring Boot Application. It work nice. Now i want know how it work, specially how it process access token when server receive any hit but to do that i'm unable to find the class in where i will put the break points because it handle all work internally. So to debug my application for knowing how it process every request from client, in where or in which class do in need to put break points? i can put break points inside my class which i created but that's not the scenery because Sprint Boot Oath2 and Jwt do that task internally by default, i need to put break in their.

Answer 1

If you want to debug /oauth/token which generates the Access Token and Refresh Token you need to add a break point in TokenEndpoint.postAccessToken or TokenEndpoint.getAccessToken method based on Request Method type.

If you want to debug the process which validates the Access Token and Authenticates/Authorizes users then you need to add a break point in OAuth2AuthenticationProcessingFilter.doFilter method which responsible for extracting Access Token from Authorization header and authenticating/authorizing users.

Answer 2

You should add a break point in spring.security.oauth2 in org.springframework.security.oauth2.provider.endpoint.TokenEndpoint method getAccessToken and postAccessToken and in org.springframework.security.oauth2.provider.authentication.OAuth2AuthenticationProcessingFilter method doFilter and also in org.springframework.security.oauth2.provider.endpoint.CheckTokenEndpoint method checkToken