# Spring Boot , Access control list

**URL:** <https://devforum.okta.com/t/spring-boot-access-control-list/5424>\
**Category:** Questions\
**Created:** [June 18, 2019, 5:28am UTC](https://devforum.okta.com/t/spring-boot-access-control-list/5424 "2019-06-18T05:28:42Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![ashu8006kumar](https://sea1.discourse-cdn.com/oktadev/user_avatar/devforum.okta.com/ashu8006kumar/32/1196_2.png) [@ashu8006kumar](https://devforum.okta.com/u/ashu8006kumar)\
**Post date:** [June 18, 2019, 5:28am UTC](https://devforum.okta.com/t/spring-boot-access-control-list/5424/1 "2019-06-18T05:28:42Z")

</div>

Hi ,  
I am using Single page application , with spring boot ,  
I have completed Authentication implementation using okta ( SPA application )

But I want to manage there Role and access list in application instead of Okta . Please guide me on this

---

<div class="post-metadata">

**Author:** ![bdemers](https://sea1.discourse-cdn.com/oktadev/user_avatar/devforum.okta.com/bdemers/32/23_2.png) [@bdemers](https://devforum.okta.com/u/bdemers)\
**Post date:** [June 19, 2019, 3:20pm UTC](https://devforum.okta.com/t/spring-boot-access-control-list/5424/2 "2019-06-19T15:20:41Z")

</div>

Hey @ashu8006kumar!

Take a look at this blog post: [https://developer.okta.com/blog/2019/05/13/angular-8-spring-boot-2](https://developer.okta.com/blog/2019/05/13/angular-8-spring-boot-2)  
I’m not sure what your frontend framework is, but the backend likely looks the same as this example. Also, in OAuth terms your backend Spring Boot app is referred to as a Resource Server (If that helps navigate your future search results)

Let us know how it goes!  
-Brian

---

<div class="post-metadata">

**Author:** ![ashu8006kumar](https://sea1.discourse-cdn.com/oktadev/user_avatar/devforum.okta.com/ashu8006kumar/32/1196_2.png) [@ashu8006kumar](https://devforum.okta.com/u/ashu8006kumar)\
**Post date:** [June 20, 2019, 1:28am UTC](https://devforum.okta.com/t/spring-boot-access-control-list/5424/3 "2019-06-20T01:28:35Z")

</div>

Hi @bdemers ,  
I am following the same, so login is fine for me (It is working ) after Longin I want to add role-based access in my project (means I want to manage all role and their access list on my server not on okta).  
So let me summarised,  
One your logged in to my application (this part is done ), I want to show data as per role (Roles which are defined in the application

---

<div class="post-metadata">

**Author:** ![bdemers](https://sea1.discourse-cdn.com/oktadev/user_avatar/devforum.okta.com/bdemers/32/23_2.png) [@bdemers](https://devforum.okta.com/u/bdemers)\
**Post date:** [June 20, 2019, 2:00pm UTC](https://devforum.okta.com/t/spring-boot-access-control-list/5424/4 "2019-06-20T14:00:07Z")

</div>

If you just want to tie a token to a user, you can read the `uid` (user id) claim and map that to data in your application. Are you just looking for an identifier for the user?

---

<div class="post-metadata">

**Author:** ![ashu8006kumar](https://sea1.discourse-cdn.com/oktadev/user_avatar/devforum.okta.com/ashu8006kumar/32/1196_2.png) [@ashu8006kumar](https://devforum.okta.com/u/ashu8006kumar)\
**Post date:** [July 15, 2019, 11:41am UTC](https://devforum.okta.com/t/spring-boot-access-control-list/5424/5 "2019-07-15T11:41:51Z")

</div>

Yes @bdemers , Some thing like that

---

<div class="post-metadata">

**Author:** ![andrea](https://sea1.discourse-cdn.com/oktadev/user_avatar/devforum.okta.com/andrea/32/2172_2.png) [@andrea](https://devforum.okta.com/u/andrea)\
**Post date:** [January 17, 2024, 11:47pm UTC](https://devforum.okta.com/t/spring-boot-access-control-list/5424/6 "2024-01-17T23:47:25Z")

</div>


