Spring Security Integration with Spring Boot for Beginners
Master the essentials of securing Spring Boot applications with Spring Security, from basic authentication to advanced OAuth 2.0 integration.
...
Share
Introduction to Spring Security and Spring Boot
Unit 1: Spring Security Fundamentals
Security Landscape
Core Concepts
Spring Security Architecture
Spring Boot Auto-Configuration
Diving into Dependencies
Unit 2: Setting Up a Spring Boot Project with Spring Security
Project Setup
Adding the Security Starter
First Secured Endpoint
Understanding Auto-Config
Customizing Security
Unit 3: Basic Authentication with In-Memory User Details
In-Memory Authentication
UserDetailsService Interface
Configuring Users
Securing Endpoints
Testing Authentication
Authentication Mechanisms: JDBC and LDAP
Unit 1: JDBC Authentication
JDBC Auth: Overview
Setting Up the Database
Configuring JDBC Auth
Testing JDBC Auth
Password Encoding
Unit 2: LDAP Authentication
LDAP Auth: Overview
Setting Up LDAP Server
Configuring LDAP Auth
Testing LDAP Auth
Securing LDAP Queries
Unit 3: Custom User Details Service
Custom User Details
Implementing the Service
Creating User Objects
Registering the Service
Testing the Service
Authorization and Access Control
Unit 1: Introduction to Authorization in Spring Security
Authorization Overview
Configuring Access Control
Securing Methods
@PreAuthorize Deep Dive
@PostAuthorize in Action
Unit 2: Role-Based Access Control (RBAC)
RBAC Explained
Configuring Roles
Securing Endpoints by Role
Method Security with Roles
Custom Role Hierarchy
Unit 3: Permission-Based Access Control
Permissions Explained
Configuring Permissions
Securing Endpoints
Method Security
Custom Permission Evaluator
Unit 4: Advanced Access Control with SpEL
SpEL Intro
SpEL for Access Control
SpEL with @PreAuthorize
SpEL with @PostAuthorize
Custom SpEL Functions
Customization and Advanced Security Features
Unit 1: Customizing Login and Logout
Custom Login Page Setup
Login Form Configuration
Custom Logout Handling
Logout Confirmation
Styling Login and Logout
Unit 2: OAuth 2.0 and OIDC Integration
OAuth 2.0 Introduction
OIDC Introduction
OAuth 2.0 Setup
Authorization Code Grant
Accessing User Info
Unit 3: JWT (JSON Web Tokens)
JWT Introduction
Generating JWTs
Token-Based Auth Flow
Securing REST APIs
Refresh Tokens
Security Best Practices and Testing
Unit 1: Core Security Best Practices
CSRF Protection
XSS Prevention
Session Management
Clickjacking Defense
Input Validation
Unit 2: Security Testing Strategies
Unit Testing Security
Integration Testing
Penetration Testing Basics
Static Code Analysis
Dependency Scanning
Unit 3: Common Security Pitfalls and Mitigation
Injection Attacks
Authentication Bypass
Insecure Direct Object
Cryptographic Issues
Error Handling