Spring Security for Spring Boot Zero to Hero
Master Spring Security with Spring Boot: From foundational concepts to advanced techniques, build secure and robust applications.
...
Share
Fundamentals of Spring Security
Unit 1: Core Concepts of Spring Security
Security Essentials
Security Context Deep Dive
Principal Unveiled
GrantedAuthority Explained
Putting It All Together
Unit 2: Basic Authentication Mechanisms
In-Memory Auth: Setup
In-Memory Auth: Details
JDBC Auth: Setup
JDBC Auth: Details
JDBC Auth: Customization
Unit 3: Secure Password Storage
Password Storage: The Why
Intro to BCrypt
BCrypt: Implementation
BCrypt: Configuration
Password Upgrade Strategy
Authorization and Access Control
Unit 1: Introduction to Authorization
AuthN vs. AuthZ
The Principal Object
Granted Authorities
AccessDecisionManager
Configuring AuthZ
Unit 2: Role-Based Access Control
What is RBAC?
Defining Roles
Assigning Roles to Users
Securing Methods with Roles
Securing URLs with Roles
Unit 3: Expression-Based Access Control (SpEL)
Intro to SpEL
Using @PreAuthorize
Using @PostAuthorize
Common SpEL Expressions
Custom SpEL Functions
Unit 4: Customizing Security Configurations
Custom Auth Provider
Custom UserDetailsService
Custom AccessDeniedHandler
Custom Logout Success
Extending WebSecurityConfigurerAdapter
Securing REST APIs with Spring Security
Unit 1: REST API Security Fundamentals
Securing APIs: An Intro
Configuring API Security
Statelessness and APIs
CSRF and APIs
CORS Configuration
Unit 2: JWT Authentication
Intro to JWT
Generating JWTs
Validating JWTs
Securing Endpoints with JWT
Refresh Tokens
Unit 3: Handling Security Vulnerabilities
XSS Overview
XSS Prevention
CSRF Deep Dive
CSRF Defense
Other Vulnerabilities
Advanced Security Features and Best Practices
Unit 1: OAuth 2.0 and OIDC Integration
OAuth 2.0 Introduction
Setting up OAuth 2.0
OIDC Deep Dive
OIDC Integration
Customizing OAuth/OIDC
Unit 2: Multi-Factor Authentication (MFA)
MFA: The Basics
TOTP: How it Works
Setting up TOTP
Verifying TOTP Codes
MFA Best Practices
Unit 3: Logging, Auditing, and Testing
Security Logging
Security Auditing
Testing Security: Unit
Testing Security: Integration
Best Practices: Testing
Unit 4: Spring Security Best Practices
Password Handling
CSRF Protection
CORS Configuration
Session Management
Dependency Management