_ SPRING BOOT & SPRING SECURITY

Learn Spring Security Core|

The definitive guide to secure your Java application

Spring Security has been the standard in most Java implementations for years, of course. And with the launch of 6.0, it’s been continuously evolving.

That meant full Java configuration with lambdas, native Boot integration, complex authorization support, reactive security implementation, and support for pretty much any security mechanism you need.

Authentication

Registration

Security Expressions

Course Outline

⏱~ 25.5 HOURS

Secure a Simple Spring MVC Application

7 LESSONS • ~ 3 HOURS

1.Intro to Spring Security

2.A Basic Security Java Config

3.URL Authorization

4.Building a Login Form

5.Implementing Logout

6.Anonymous Authentication

7.Overview of Spring Security Objects

A Full Registration Flow

6 LESSONS • ~ 2.5 HOURS

1.A Simple Registration Flow

2.Authentication Using Real Users

3.Activate a New Account via Email

4.Deal with "I Forgot My Password"

5.Doing Security Questions Right

6.Ensure Password Strength During Registration

Remember Me

3 LESSONS • ~ 1 HOUR

1.A Simple Remember Me Flow

2.Remember Me with Cookie

3.Remember Me with Persistence

Spring Security on the Client

4 LESSONS • ~ 1.5 HOURS

1.Spring Security with JSP

2.The Authentication Tag and Displaying the Current User

3.Spring Security with Thymeleaf

4.The Authorize Tag

Spring Security Expressions

4 LESSONS • ~ 1.5 HOURS

1.URL Authorization with Expressions

2.Method Authorization with Expressions

3.In-page URL Authorization with Expressions

4.Programmatic Expressions and a Custom PermissionEvaluator

Password Storage

5 LESSONS • ~ 2 HOURS

1.Introduction to Storing Passwords

2.Hashing Passwords (MD5 and SHA-256)

3.Why Hashing Isn't Enough – Using Salts

4.Key Stretching

5.The bcrypt Solution

Spring Security Advanced Configuration

4 LESSONS • ~ 2 HOURS

1.Breaking Down the Authentication Flow

2.Run As a Different User

3.The Security Context

4.Configure the Filter Chain

Advanced Authentication

5 LESSONS • ~ 2.5 HOURS

1.A Custom Authentication Provider

2.Multiple Providers and the Authentication Manager

3.In-Memory, JDBC and Hibernate/JPA User Storage

4.Tracking Logged-in Users

5.Setting Up Users at Startup

Advanced Authorization

4 LESSONS • ~ 2.5 HOURS

1.How Authorization Works

2.The Topology of Roles and Privileges

3.Secure Method Invocations with AOP

4.Defining Custom Access-Control Logic

Basic REST API Security

3 LESSONS • ~ 1 HOUR

1.The Basics of API Security

2.Basic Authentication for the API

3.Certificates and HTTPS for Tomcat

ACL with Spring Security

3 LESSONS • ~ 2 HOURS

1.Introduction to ACL and Domain Object Security

2.The Data Structure of ACL

3.ACL with Spring Security

Two-Factor Authentication

2 LESSONS • ~ 1 HOUR

1.A Simple Two-Factor Implementation with a Soft Token

2.A Two-Factor Implementation with SMS

Advanced Spring Security Scenarios

4 LESSONS • ~ 2 HOURS

1.Spring Security for a Non-Spring Application

2.Multi-Tenancy with Spring Security

3.Session Management with spring-session

4.Spring Security with LDAP

Reactive Security

3 LESSONS • ~ 1 HOUR

1.A Basic Reactive Security Example

2.Reactive Method Security

3.WebFlux Form Login

Access this course through Baeldung All Access

Our Full Course Library

IntelliJ Idea Ultimate (6 months free)

JProfiler (6 months free)

All Upcoming Courses (Roadmap)

Certificates of Completion

Multiple-Choice questions in Each Lesson

Pro Access

Explore All Access Yearly or the Lifetime access

Do you have a team who would benefit from taking the course?

Here are our team licenses →

20-Day Money Back Guarantee

I believe strongly in the quality of the course material to teach you the fundamentals of the library. I've put a lot of work and care into the material and hope you're going to use it and to develop and maintain your applications.

I confidently back all courses with a 20-Day Money Back Guarantee. I want you to dive in deep and experience the full wealth of this resource without hesitation.

If the material isn't a good fit, just contact me within 20 days of purchase and ask for a full refund for any single course package.

The most common questions, answered -->