Hi,
The video tutorial and the latest code changes work perfectly locally.
But when I deploy it to an external server shows no server error but returns 404 for every request.
Is there another setting we need to do if we want to deploy it on an external server?

Hi Dan,

sorry for this question, that is not related to Spring Security, but I'm curious:

In your SecurityConfig.java you have a private field rsaKey that you initialize in jwkSource Method and access later in jwtDecoder.

I'm not too deep into Spring's internal working, that's why I'm interessted, (why) it is guaranteed, that jwtDecoder is not invoked before jwkSource (would provoke a NullPointerException) by Spring? I understand that in jwtEncoder you have a dependency to jwkSource so it is sure that the bean and also rsaKey attribute is created before, but jwtDecoder has neither a dependency to jwkSource nor to jwtEncoder?

Thanks!
(and also a big thank you for your Spring Security YT videos 👏)

Hi Dan,
would you recomment using code generated rsa keys for production?
As far as I understand all tokens are invalidated if the application is restarted, am I right?