Best of Spring Security — 2024

  1. 1
    Article
    Avatar of freecodecampfreeCodeCamp·2y

    Build a Shopping Cart Backend with Spring Boot and Spring Security

    Master Spring Boot and Spring Security by developing a fully functional shopping cart backend application. This course covers project setup, entity class creation, CRUD operations, service and controller development, and security integration using JWT. Suitable for both beginners and experienced developers, it provides practical insights and skills for backend development.

  2. 2
    Article
    Avatar of faunFaun·2y

    Spring Boot 3.1 JWT Authentication &Authorization: Secure Your APIs Like a Pro🔒

    Learn how to secure your Spring Boot 3.1 applications using JWT authentication and authorization. This guide covers creating a Spring Boot project, setting up dependencies, creating secure endpoints, and configuring JWT tokens for user authentication. Includes practical examples and code snippets to help you implement security measures swiftly.

  3. 3
    Article
    Avatar of justjavaJust Java·2y

    what is Spring Security for real 🤔

    Spring Security is a powerful framework for securing Java applications, handling authentication and authorization. It protects against vulnerabilities like CSRF and XSS, offers customizable security policies, and integrates seamlessly with other Spring projects. Features include security context propagation, custom authentication providers, method-level security, and configuring security headers for enhanced protection. A real-world example shows how to secure a RESTful API with role-based access.

  4. 4
    Video
    Avatar of teluskoTelusko·2y

    Spring Boot and Spring Security with JWT

    The post discusses the Spring Framework, popular in enterprise Java applications for its scalability and security. It highlights the evolution from Java EE to Spring and introduces Spring Boot, which simplifies project setup and management. The post also mentions Spring's role in building various applications like microservices and serverless apps, emphasizing dependency injection and the ioc container. The discussion extends to auto-wiring and configuring Spring Boot via annotations for efficient object management.

  5. 5
    Article
    Avatar of freecodecampfreeCodeCamp·2y

    How to Implement an OAuth2 Resource Server with Spring Security

    Learn how to implement an OAuth2 resource server with Spring Security. Secure your APIs using OAuth2 and access tokens. Set up a Spring Boot application, configure web security, and extract user details from the access token.

  6. 6
    Article
    Avatar of cerbosCerbos·2y

    Guide to Java authentication and authorization

    Authorization is crucial for ensuring only authorized users can access specific resources in an application. Traditional methods like RBAC have been supplemented by ABAC and PBAC for more granular control. OAuth and OpenID Connect are popular for secure authentication. The post reviews three Java frameworks: Spring Security, Apache Shiro, and JAAS, and discusses their features and integration capabilities. The role of authorization in microservices, its challenges, and emerging technologies like zero trust architecture are also explored.

  7. 7
    Article
    Avatar of baeldungBaeldung·2y

    Dynamic Client Registration in Spring Authorization Server

    Spring Authorization Server provides sensible defaults suitable for client applications with minimal configuration. However, dynamic client registration is not enabled by default. Follow these steps to enable and use dynamic client registration in a Spring Boot application, ensuring proper authentication using bearer tokens and configuring the necessary endpoints. The tutorial includes both server and client implementations, detailing how to register clients dynamically using a custom `RegisteredClientRepository` and integrating the process into a Spring Security-based application for dynamic OAuth2 client management.

  8. 8
    Article
    Avatar of reflectoringReflectoring·2y

    Getting started with Spring Security and JWT

    Spring Security offers robust security features for Java applications, including session management, authentication, and protection against common threats like CSRF. This guide covers the implementation of JWT (JSON Web Token) for secure communication between two parties. JWTs are versatile and can be used for single sign-on, API authentication, stateless sessions, and microservices. It covers the creation, structure, common use cases, and potential drawbacks of JWTs, as well as a step-by-step guide to implement JWT for authentication in a Spring Boot application.

  9. 9
    Article
    Avatar of baeldungBaeldung·2y

    Integrating Firebase Authentication With Spring Security

    Integrating Firebase Authentication with Spring Security simplifies the process of user authentication in modern web applications. This guide covers setting up the project, creating users, implementing login functionality, exchanging refresh tokens for new ID tokens, and securing private API endpoints. By leveraging Firebase, developers can manage user credentials and access seamlessly.

  10. 10
    Article
    Avatar of baeldungBaeldung·2y

    Spring Boot 3 – Configure Spring Security to Allow Swagger UI

    Learn how to configure Spring Security to allow access to Swagger UI in a Spring Boot 3 application. This guide covers setting up the necessary dependencies, creating a simple controller, and configuring security using WebSecurityCustomizer and SecurityFilterChain to permit unauthenticated access to Swagger UI endpoints.