Oauth2 Authorization Server

An OAuth2 authorization server project based on Spring Boot 3 and Java 24, supporting GraalVM native images, CRaC checkpoint restoration, local AI model testing, and Docker deployment.

Security Developer tools #OAuth2 authorization #Spring security #AI integration #Docker deployment .Java

rating : 2.5 points

downloads : 16

update time : 2025-04-29

What is an MCP server?

The MCP server implements the Model Context Protocol, providing AI models with the ability to securely access external resources (such as file systems, web searches, databases, etc.). It acts as a secure intermediary between AI models and sensitive data.

How to use an MCP server?

Integrate it into your application via the Spring Boot Starter. After configuring resource access permissions, AI models can securely access the required resources through standard APIs.

Applicable scenarios

Suitable for scenarios where AI needs to access enterprise data while maintaining data security, such as financial analysis, medical consultations, and enterprise internal knowledge Q&A.

Main features

Resource access controlFinely control which resources (files, APIs, databases, etc.) an AI model can access

Security sandboxExecute AI model requests in an isolated environment to prevent data leakage

Audit logsRecord all resource access requests for security auditing

Advantages and limitations

Advantages

Protect sensitive data from direct access by AI models

Standardize the interaction between AI and resources

Support multiple resource types (files, APIs, databases, etc.)

Limitations

Requires additional configuration of resource access permissions

May introduce a slight performance overhead

Requires maintenance of additional service components

How to use

Add dependencies

Add the MCP Starter dependency to your Spring Boot project

Configure resources

Configure the resources that are allowed to be accessed in application.yml

Integrate an AI model

Use the MCP client to access resources in your AI model code

Usage examples

Financial analysis assistantThe AI analyzes corporate financial reports but can only access files in the specified directory

Medical knowledge Q&AThe AI answers medical questions but can only obtain information from the approved medical knowledge base

Frequently Asked Questions

How does MCP ensure data security?

What types of resources are supported?

How much does it affect performance?

Related resources

MCP protocol official website

Official documentation for the Model Context Protocol

Spring AI documentation

Official documentation for the Spring AI framework

MCP introduction video

Video explanation of how the MCP protocol works

🚀 OAuth2 and Spring Boot 3: A Starter Guide to Spring Authorization Server with Database-Persisted Login Data

This guide provides an in - depth understanding of building an OAuth2 - based authorization server using Spring Boot 3, with user login data stored in a database.

📚 Content Overview

OAuth2 Protocol: Understand the basic concepts, workflows, and applications of OAuth2 in modern authentication systems.
Spring Security: Learn how to use Spring Security to implement secure authentication and authorization mechanisms.
Database Integration: Persist user login data in a database to ensure system security and reliability.
Practical Operations: Through specific steps, learn to build an OAuth2 - based authorization server from scratch.

📑 Reference Materials

[Spring Boot 3 Security Tutorial: Saving Login Data with OAuth2 and Spring Authorization Server](https://www.youtube.com/watch?v=rVAqh - VDw2o)
[BCryptPasswordEncoder Test Cases](https://github.com/spring - projects/spring - security/blob/main/crypto/src/test/java/org/springframework/security/crypto/bcrypt/BCryptPasswordEncoderTests.java)

🚀 Native Image Building with Spring Boot 3 and GraalVM JDK 24

This section focuses on building native images using Spring Boot 3 and GraalVM JDK 24, along with security enhancements using the Grype tool.

📚 Content Overview

AOT (Ahead - of - Time) Compilation: Understand the AOT features introduced by Spring Boot 3 and their advantages.
GraalVM JDK 24: Learn how to use GraalVM to compile Java applications into high - performance native images.
Grype Tool: Use Grype to scan for vulnerabilities in container images and file systems, enhancing security.

🛠️ Steps

Configure Docker Desktop to enable the "Host - side TCP support" feature:
- Open Docker Desktop settings, go to "Experimental features" -> "Enable developer mode options" -> Enable "Host - side TCP support" and restart.

Download and run the AI model:

docker model pull ai/gemma3:4B - Q4_K_M
docker model run ai/gemma3:4B - Q4_K_M

📑 Reference Materials

[Welcome to GraalVM JDK 24! 🚀](https://medium.com/graalvm/welcome - graalvm - for - jdk - 24 - 7c829fe98ea1)
[How to Generate Native Images with Spring Boot 3 and GraalVM](https://www.youtube.com/watch?v=FjRBHKUP - NA)

🚀 Running AI Models Locally with Docker Desktop Model Runner

This part explains how to use Docker Desktop's new feature to run AI models locally and introduces the MCP protocol.

📚 Content Overview

Docker Desktop Model Runner: Learn how to use the latest features of Docker Desktop to run AI models locally.
MCP Protocol: Understand the basic concepts of the Model Context Protocol (MCP) and its applications in AI models.

🛠️ Steps

Install and configure Docker Desktop:
- Open Docker Desktop settings, go to "Experimental features" -> "Enable developer mode options" -> Enable "Host - side TCP support" and restart.

Download and run the AI model:

docker model pull ai/gemma3:4B - Q4_K_M
docker model run ai/gemma3:4B - Q4_K_M

📑 Reference Materials

[Docker Desktop Model Runner Documentation](https://docs.docker.com/desktop/features/model - runner/)
How to Interact with AI Models Using the MCP Protocol

🚀 Building an Authorization Server with Spring Boot and OAuth2

This guide is about building an authorization server using Spring Boot and OAuth2, covering key concepts and implementation steps.

📚 Content Overview

OAuth2 Protocol: Understand the basic concepts, workflows, and applications of OAuth2 in modern authentication systems.
Spring Security: Learn how to use Spring Security to implement secure authentication and authorization mechanisms.
Database Integration: Persist user login data in a database to ensure system security and reliability.

🛠️ Steps

Create a Spring Boot project and add dependencies:

<dependency>
    <groupId>org.springframework.boot</groupId>
    <artifactId>spring - boot - starter - oauth2</artifactId>
</dependency>

Configure the OAuth2 authorization server:
- Configure the application.properties file to enable OAuth2 functionality.
- Implement a custom UserDetailsService to retrieve user information from the database.

📑 Reference Materials

[Spring Boot OAuth2 Starter Tutorial](https://www.baeldung.com/spring - security - oauth2)
[How to Build an Authorization Service with Spring Authorization Server](https://spring.io/blog/2021/06/28/spring - authorization - server)

🚀 Scanning Container Image Vulnerabilities with Grype

This section focuses on using the Grype tool to scan for vulnerabilities in container images.

📚 Content Overview

Grype Tool: Understand the basic functions of Grype and its applications in container security.
Vulnerability Scanning: Learn how to use Grype to scan for known vulnerabilities in Docker images and file systems.

🛠️ Steps

Install and configure Grype:

go install github.com/anchore/grype/cmd/grype@latest

Scan a Docker image:
```
grype --image your_docker_image_name
```

📑 Reference Materials

[How to Scan Container Vulnerabilities with Grype](https://docs.grype.dev/get - started)
Grype Official Documentation

Featured MCP Services

Notion Api MCP

Certified

A Python-based MCP Server that provides advanced to-do list management and content organization functions through the Notion API, enabling seamless integration between AI models and Notion.

Python

141

4.5 points

Duckduckgo MCP Server

Certified

The DuckDuckGo Search MCP Server provides web search and content scraping services for LLMs such as Claude.

Markdownify is a multi-functional file conversion service that supports converting multiple formats such as PDFs, images, audio, and web page content into Markdown format.

The GitLab MCP server is a project based on the Model Context Protocol that provides a comprehensive toolset for interacting with GitLab accounts, including code review, merge request management, CI/CD configuration, and other functions.

TypeScript

4.3 points

Figma Context MCP

Framelink Figma MCP Server is a server that provides access to Figma design data for AI programming tools (such as Cursor). By simplifying the Figma API response, it helps AI more accurately achieve one - click conversion from design to code.

UnityMCP is a Unity editor plugin that implements the Model Context Protocol (MCP), providing seamless integration between Unity and AI assistants, including real - time state monitoring, remote command execution, and log functions.

567

5 points

Minimax MCP Server

The MiniMax Model Context Protocol (MCP) is an official server that supports interaction with powerful text-to-speech, video/image generation APIs, and is suitable for various client tools such as Claude Desktop and Cursor.

Context7 MCP is a service that provides real-time, version-specific documentation and code examples for AI programming assistants. It is directly integrated into prompts through the Model Context Protocol to solve the problem of LLMs using outdated information.

TypeScript

5.2K

4.7 points

Zhiqi Future, Your AI Solution Think Tank

English 简体中文繁體中文にほんご