Spring Security in Action, Second Edition

✍ Scribed by Laurentiu Spilca

• Publisher: Manning
• Year: 2024
• Tongue: English
• Leaves: 515
• Edition: 2
• Category: Library

✦ Synopsis

Design and develop Spring applications that are secure right from the start.

In Spring Security in Action, Second Edition you will learn essential security skills including how to:

• Implement and customize authentication and authorization
• Set up all components of an OAuth 2/OpenID Connect system
• Utilize CRSF and CORS configurations
• Secure Spring reactive applications
• Write tests for security configurations

Spring Security in Action, Second Edition is a revised version of the bestselling original, fully updated for Spring Boot 3 and Oauth2/OpenID Connect. This new edition covers the latest patterns for application-level security in Spring apps, demonstrating how Spring Security simplifies every step of the security process. Code samples and useful real-world examples give you hands-on experience of protecting your apps from common threats such as injection attacks and poor monitoring.

About the technology

Spring Security is essential for any Java developer looking to master authentication and authorization in Spring apps. By adopting "secure by design" principles with Spring Security's out-of-the-box features, you can protect your apps from data theft and unauthorized intrusions.

About the book

Spring Security in Action, Second Edition reveals the Spring Security techniques and tools you need to defend your apps against attack. In this book, author Lauren?iu Spilca, a skilled Java and Spring developer, will teach you how to build your own authorization server, manage system users, configure secure endpoints, and prevent cross-site scripting and request forgery attacks. This new second edition delves into the OAuth 2/OpenID Connect stack and details SecurityFilterChain for security configuration. Don't let security be an afterthought. Start protecting your apps from the first line of code!

About the reader

For experienced Java and Spring developers.

About the author

Laurentiu Spilca is a skilled Java and Spring developer and an experienced technology instructor. He is also the author of Manning’s Spring Start Here and Troubleshooting Java.

✦ Table of Contents

1_Security_today
2_Hello_Spring_Security
3_Managing_users
4_Managing_passwords
5_A_web_app’s_security_begins_with_filters
6_Implementing_authentication
7_Configuring_endpoint-level_authorization:Restricting_access
8_Configuring_endpoint-level_authorization:_Applying_restrictions
9_Configuring_Cross-Site_Request_Forgery(CSRF)protection
10_Configuring_Cross-Origin_Resource_Sharing(CORS)
11_Implement_authorization_at_the_method_level
12_Implement_filtering_at_the_method_level
13_What_are_OAuth_2_and_OpenID_Connect?
14_Implementing_an_OAuth_2_authorization_server
15_Implementing_an_OAuth_2_resource_server
Part_1_Say_hello_to_Spring_Security
Part_2_Configuring_authentication
Part_3_Configuring_authorization
Part_4_Implementing_OAuth_2_and_OpenID_Connect
16_Implementing_an_OAuth_2_client
Part_5_Going_reactive
17_Implementing_security_in_reactive_applications
Part_6_Testing_security_configurations
18_Testing_security_configurations
Appendix_A._Links_to_official_documentation
Appendix_B._Further_reading
index