Intro

Guest Course Intro

Nelson Course Intro

Bootstrap app

Create API

Install Spring Security

Explain form login

Explain basic authentication

Implement basic authentication

Implement basic authentication

Explain JWT authentication

Implement JWT authentication filter

Implement JWT utils class and finalise the filter

Tell Spring to use the JWT filter

Implement userDetailsService

Add the authenticationProvider bean

Add session management creation policy

Implement Authentication controller

Improve the code

Testing the application

Outro

Intro

Spring Security Architecture

Outro

THINKING SECURITY

Why Spring Security

5 Core Concepts in Spring Security

Introduction

Analysing User / Roles in Realtime web apps

Out of Context (A simple Java Pattern)

UserDetails in Spring Security

Configure User in spring security

GrantedAuthority and SimpleGrantedAuthority

UserDetailsManager and InmemeoryUserDetailsManager

PasswordEncoder and NoopPasswordEncoder

QNA

Spring Security

Passwords

Encryption

Authorization

Intro

Starting point

How does Spring Security work?

How does a web app work?

What is Spring Security?

What does Spring Security add?

Create a User ID and Password

Summary

Configuring the authentication mechanism

Intro

Scenario 1: Creating Rest Endpoint with Spring MVC

Scenario 2: Adding Spring Security dependency

Scenario 3: Implementing custom authentication filter and user details service

Setting up Authentication Manager

Creating custom UserDetailsService

Configuring path security

Creating custom authentication filter

Scenario 4: Implementing custom authentication provider

Scenario 5: Implementing multiple authentication providers

Outro

Introduction

Spring Security Interview Questions

Configure User using UserBuilder

A Builder Design Pattern

Setting up UserDetailsManager

PasswordEncoder

NoopPasswordEncoder Vs BcryptPaswordEncoder

InMemeoryUserDetailsManager Internals

UserDetailsService: loadUserByUserName

HttpSecurity Default Configuration

Customize HttpSecurity

authoizeHttpRequest - old way

formLogin()

httpBasics()

authenticated() vs permitAll() vs denyAll()

Upgrading to Latest spring security

authoizeHttpRequest : Lambda DSL way

Spring Security Customizer

Spring Security QNA

Role based authentication and authorization

Intro

How to configure authorization in Spring?

Create APIs in the application

Override methods in WebSecurityConfigurator

How to specify the mapping of path to role

How to specify a role in Spring Security

How to logout in Spring Security

How to allow access to static assets in Spring Security?

Why establish authorization chains?

How does Spring security work under the hood?

Creating One Spring Boot Application

Admin Api

Basic Authorization

Security Configuration

Spring Configuration

Authorize Http Request

Authorization

Role Base Authentication

Security Filter Chain

Create One New User with the Admin Access

Introduction

Let's Build and Secure an app using spring security

Spring MVC 6 + , Java 17 + , Tomcat 10 + setup

Setting up Spring MVC with a Dispatcher Servlet

Setting up Spring security

Setting up DelegatingFilterProxy

EnableWebSecurity and SpringSecurityFilterChain

Welcome Note

What is Spring Security / Spring Security Overview

Spring Security Design / Spring Security Architecture (Basic)

Why is Spring Security Important / Why Spring Security is popular

How to Add Spring Security / Steps to add Spring Security

Bootstrap Spring Boot with Spring Web and Spring Security using Spring Initializr

Demonstration : Build Get API : Spring boot

Demonstration : Test Get API : Without Spring Security

Demonstration : Get API : Adding Spring Security back to pom.xml

Demonstration : Test Get API : With Spring Security : Login Form

Default username and password for login by Spring Security

Custom username and password for login by application.properties

Session Summary

Thank You