Everand Logo

Welcome to Everand!

  • Discover millions of ebooks, audiobooks, and so much more with a free trial

    Only $11.99/month after trial. Cancel anytime.

    Spring Security in Action
    Spring Security in Action
    Spring Security in Action
    Ebook1,160 pages11 hours

    Spring Security in Action

    By Laurentiu Spilca

    ()

    Read preview

    About this ebook

    Spring Security in Action shows you how to prevent cross-site scripting and request forgery attacks before they do damage. You’ll start with the basics, simulating password upgrades and adding multiple types of authorization. As your skills grow, you'll adapt Spring Security to new architectures and create advanced OAuth2 configurations. By the time you're done, you'll have a customized Spring Security configuration that protects against threats both common and extraordinary.

    Summary
    While creating secure applications is critically important, it can also be tedious and time-consuming to stitch together the required collection of tools. For Java developers, the powerful Spring Security framework makes it easy for you to bake security into your software from the very beginning. Filled with code samples and practical examples, Spring Security in Action teaches you how to secure your apps from the most common threats, ranging from injection attacks to lackluster monitoring. In it, you'll learn how to manage system users, configure secure endpoints, and use OAuth2 and OpenID Connect for authentication and authorization.

    Purchase of the print book includes a free eBook in PDF, Kindle, and ePub formats from Manning Publications.

    About the technology
    Security is non-negotiable. You rely on Spring applications to transmit data, verify credentials, and prevent attacks. Adopting "secure by design" principles will protect your network from data theft and unauthorized intrusions.

    About the book
    Spring Security in Action shows you how to prevent cross-site scripting and request forgery attacks before they do damage. You’ll start with the basics, simulating password upgrades and adding multiple types of authorization. As your skills grow, you'll adapt Spring Security to new architectures and create advanced OAuth2 configurations. By the time you're done, you'll have a customized Spring Security configuration that protects against threats both common and extraordinary.

    What's inside
        Encoding passwords and authenticating users
        Securing endpoints
        Automating security testing
        Setting up a standalone authorization server

    About the reader
    For experienced Java and Spring developers.

    About the author
    Laurentiu Spilca is a dedicated development lead and trainer at Endava, with over ten years of Java experience.

    Table of Contents

    PART 1 - FIRST STEPS

    1 Security Today

    2 Hello Spring Security

    PART 2 - IMPLEMENTATION

    3 Managing users

    4 Dealing with passwords

    5 Implementing authentication

    6 Hands-on: A small secured web application

    7 Configuring authorization: Restricting access

    8 Configuring authorization: Applying restrictions

    9 Implementing filters

    10 Applying CSRF protection and CORS

    11 Hands-on: A separation of responsibilities

    12 How does OAuth 2 work?

    13 OAuth 2: Implementing the authorization server

    14 OAuth 2: Implementing the resource server

    15 OAuth 2: Using JWT and cryptographic signatures

    16 Global method security: Pre- and postauthorizations

    17 Global method security: Pre- and postfiltering

    18 Hands-on: An OAuth 2 application

    19 Spring Security for reactive apps

    20 Spring Security testing
    LanguageEnglish
    PublisherManning
    Release dateOct 1, 2020
    ISBN9781638350743
    Spring Security in Action
    Author

    Laurentiu Spilca

    Laurentiu Spilca is a skilled Java and Spring developer and an experienced technology instructor. He is the author of Manning’s Spring Start Here and Spring Security in Action.

    Read more from Laurentiu Spilca

    Related to Spring Security in Action

    Related ebooks

    Internet & Web For You

    View More
    View More

    Related podcast episodes

    Related articles

    • Article

      An Introduction To Rabbitmq

      Jun 29, 2021

      RabbitMQ is a Message Broker, which means that it can safely hold messages generated by applications and make them available to other applications. The main advantages are reliability, support for clustering and high-availability queues, tracing capa

      1 min read

    • Article

      Metrics & Visuals In Go

      Nov 17, 2020

      Mihalis Tsoukalos is a DataOps engineer and a technical writer. He’s the author of Go Systems Programming and Mastering Go, 2nd edition. The subject of this tutorial is two-fold. First, it’s about creating a Go application that exports metrics to P

      7 min read

    • Article

      Installation

      Oct 19, 2021

      Installation
      1 min read

    • Article

      Secure Browsers

      Jun 3, 2019

      Secure Browsers
      4 min read

    • Article

      Five Key VPNs for Your Apple Gear

      Aug 1, 2021

      Five Key VPNs for Your Apple Gear
      5 min read

    • Article

      Windscribe

      Jan 6, 2022

      Windscribe
      3 min read

    • Article

      Supply Chain Attacks

      Aug 23, 2021

      Supply Chain Attacks
      4 min read

    • Article

      ExpressVPN

      Sep 19, 2023

      ExpressVPN
      3 min read

    • Article

      Password Managers

      Nov 6, 2023

      Password Managers
      11 min read

    • Article

      Buyer’s Guide: Seven Steps To Sweet Security

      Jun 10, 2021

      Not necessarily. Several security suites are available in both paid-for and cut-down free editions. Indeed, Windows’ built-in antivirus measures have been getting smarter over the years to the point where they now provide protection that’s at least o

      5 min read

    • Article

      Two-factor Tools

      May 30, 2022

      Two-factor Tools
      3 min read

    • Article

      “One Question I’m Often Asked Is How Secure It Is To Put All Your Password Eggs In One Basket”

      Feb 8, 2024

      Once upon a time, there was a huge company that, a couple of weeks after a patch for a critical vulnerability had been patched by the vendor, discovered threat actors had been poking around its networks. Sounds familiar, doesn’t it? However, this is

      7 min read

    • Article

      Bitwarden

      Sep 19, 2023

      Bitwarden
      2 min read

    • Article

      Remote Support Software 2020

      Aug 13, 2020

      Remote Support Software 2020
      3 min read

    Related categories

    Reviews for Spring Security in Action

    0 ratings

    0 ratings0 reviews

    What did you think?

    Tap to rate

    Review must be at least 10 words

      Book preview

      Spring Security in Action - Laurentiu Spilca

       |1abook_preview_excerpt.html}ۮGd9u,Rrd.:UQI2H̤rhуyk""3)Uyǰˎ}]{ŧ?]UCj=ᛧ^UåmB.ٍfچXP_, Ep+8M7n?v,PvMQ5-zmámiچm=a_5M~(:ө6%YlCӑfpWh͡< 'ZVf{<O=/!qũk76&}]q ׽*^пi#=sZ@WDK W#hm͛5v6jiiT ?)]8Ӵ]юl1ҟw'=8v-E?a)mX-pjErAHZv}#muz1cוpn7wֲ<Pw^7MKh%G5!Nly1džJ4_SGhin9Y® !trɉz⏢9n8%_CM6-zOv6$h}[?Ə,`O蓟2=Krn3/d'|A+H{&tR`'DlڱSS:JL,KoCeÛ6bvrJ|XvX0 cSg8d+I) , ãMѨNKUA'8 0nlaS)`Wv #=ѬGLOU6wآעO5!OR=(\ϩP8BV}?^'no2z-c9`g*`:;U!V4/W3uHiЗU=-M iGL'f/XXu8m8OyʹPjsutP-FKNG#(Y@@ TC٫r9ŔC&zXMKwW>Tu3h]BmGZo!BCV|VfPl[z٤:* ݑg=V2F\Uܶ*tzp;]pDϣi?J;-l6tMY*?U/̅@z9Nc =hbS^@:ϴ0r-րtU fQ YL[2 KxRA'b{np{M-̖-+ф}GmX,JCW4-LS^: d߱y!>WuͲJ2YmFjzz/A[ZNWБܲdXLOoqSBtVb m:4{Go"oWP 0Hс5ETx׎ѫ2{UILɱ U5tu;ŕ001@#<94 ^&򮘲eݡM.q=,̻ 2ZﮯvdelzXFzpN /{?揪8h'm;xߚEt:| ʻHٲaiBY BV1=H%X-뮥!U>IV'sĤì0E^!]zIgQfJ"g|]agD/n[v |dqj=?hu1:>YP]Ez2WRM;פHmCc{VQV< T!T$(\+/ctHIUFZzvq)cRP<-I3eV?Cj> XƎ(Di!"m9Oa"Yd߇s kwHqLC-A>CUl=MԤTi'N .=iq}G31u-&rH)c<Rƞ}y.* t kzegJ$_HciLjCa9?SQ| ,Qj#t'_$qXFOsxȂ ^gt/x1}Ւb6uHHZm5Ulčp,&M у=G#Əv!,f>ÊsAG?3̜4$i70t|LީlM(ecIӲѮ ,?\9-Qߏ~'1>41ޒ@xX[MkyI}R .x='pӗ3VcNSM0RZ!_Q`a!0OS.a,A~99,D8Tu۷Es/J>XRK¯m ]6ET%\pY w]NwE3=-ɲ!o!~%¡Ryi]IQ 俢uS?'yKbB bCSK:Ʈ<ۭ,Br[z>wE#Ѧj]n R?ѪϿ~d./pp V}2 Yfy| w"(/YraMUDqS.HJ.bUE jZI>^NzCJBXy=q6歗- Ac'o%FvHmݸj_RdjR:( ʶ{eD87sS7COr4Ut@ol-qH4vvIzkEGQSs{/s \J:ǣaVi䤂&f(@H}OXeWYϲ.I:rU %[I[ݕuˎ01d `Ҟ0PA&#Svak^fin?"Ba©>/4w+!vBb=g )xo,ex -TS4V[(vG֫WhfsXR$Y\EU%ɜx$!c:UAjjwV ݊0k|Cχ$~WRjdq7Uj]%gR/l-;QSA)T][NpZ K"Z/3ѿsC1X/Оa&)J"?⊸\buZh88dG޷"$3ړ' tL:TU$ʰpCsΔX&F6qilV4n4|;S1lM?D镒;q< γb^Iyݠ?jjli4[훅J9A%"ۥrD(,K<@?nntH"26< T\,N>5|ITh+2^-" U|"d u/I7?0Vv˲HJXV2Pa#)u4Q&l7M9u~KBEmcÎ+vGDuU~)c&΀zU XY,4v-˶#{~309P=oFrrNwXRXSx/[]9K,x>I96%ʚf:ijާh q8<萚ǙE= 'Tk˭cؽ>uᶧ#?k8o' ֛+A8n.Gk`353J7w8_"Y!Q< x\ЎGi!.g:%mۺOu Yh>IDYY!.3^XF&[_{ɚ t8lFՌY}u0yt?(,eQr7rYЌMQbRg%B6vPeeF}??\d&Jm WQs{\'>WrgsM 쯧# hDz5/')-sgL'G0go9]-H&nl16 Bv?4˨ҹ5߰kZ,* !5 ! {4yq5G'_!Uj&\wiuAu.Q)aYlqEn~CN2k|~+uVt; 2'҉;JAҔӗ#dZ}<ځ:h.4EqK9[qb63_PYvXpL$7e?r >phI6o b SiRɐ5=:5-Z{.Z3"NH,X&AdVO*,?t&-06f':} >)uUn--*7} yE~=Qp򒶖's3 n<֚Z],~KXq639 `3Sv, FVlg.7X6icUUӃjҎm8E:ߓ{Xߦ%LD`Ame𢡄ŃbALY>]OijmR 1rmdEm  g_=gt6%/Tދ'WUVVTc&R)6XD8}<\_sIQ$EZ7[8p@D8b_i*CSFY(B5 ~R[{GFk46-x%#ɼX:F X0WhA0 t j%NGRK@ޫV˹iiL-8}GrXH†_ӥ0'dqI>OCJZT>o$yxK e&$@i=5=2jT¨qD}# V-L7X]pϧJ[(N ҠSnAҫ؃qдO%.Hܣ^=(A2n+j_Y״!-YOS {fТz6 Ӌ {Uc'nQ-;K$c5-yý>ʣ)C|rCLd yjfEk+_]&8{J"k&-JbuWr^bJt]lberb)5md1m۴4zZAIg^O,4y:DWF꾈E~$yVzTZehd3$<%uE?d3S0d+̴ša@hm{NDoK^Yqb6`/قf9ՙҖ$~pk_ Zh>]b1MsY"e{}eQa,d+(ɱ\ksGiH~jǮl8(WN~sU{gUuaSB#{+LV9+ɶµމ;QZ V,BRS|,SBDIq@%pj#4' ËZaw,*vs`_X5gƘWmܣʻ4ŜU#ۓF\'JS[@,uFKa_vޡ[#yVH:vM~ƒ "Z楻p})ElooyK諤<'w#]Ykq'GCij>~L=fHvvkT\M'7SuU&yoN׎Y-ƺ(z6m/QТe;b `ꡬws,S 獴5t˭LR}ʲ^f9)Al. M_9Ƨlc>φÛ^jbl~ǁ.kIVPYt?0e]gGB> a_6I=WB/9$`N[2lAB.w&FZs.S2)Ѻ69]AZ̙;7eH~H\j!OLM6"FP"#Zs:Jjp(sRC,[M6&lmڕ>~}2Yˢ5yBIZK3:Wݑ4TN{It9h*k`YN˥.&.:cFhQRLVaɱ wXA- f0զ%n fhh!C$v9(ީfH("cFib"4!BzEPtIxuI1uyiĩSlc}?95`TF@F*2'x?/z5u[ _6=&ޔ1=xZ)F:`u}ϷSE8\NIuB֒ jυ US ^'%6ּB ڰQ"ByZ"YtYhbRH^|jo <}&m 88!7IT8+xF2Ο' Jv<]i>xa HCZaL#q!L "뤌Eq p8@\бRDsy8<͔i߶ j䟤޶}KyIE( n)2̫IM:B_n"3ߏautZui\)7fa)&$j]0 Jճ2ޟpa >a~cXv,/ }139G ; n*7q`N&^)Ieagg lSYIJZ!i`ͬuVhxA&O^y(FiXܾPzc^yι/\Ή 者A@|ƫ9oPr $dCfًM,ꐏ.βLVImrQO ~܀?DeƲ-:I;o!X)j;AȐ_K<{#E\xN7/fʢ#iخ!zhpֺ@e%+Y4-3:qXڐg>J:0zٖH#n28s^k;c/Yۺ%݀W a wW[ۻ */ h3s)]Кs93#qAZvVgŠiWocĤUKÖ#dAL'Hn> ϾxWGeAaAÇ(Kr~0e чϢ鮫}Y~΢%`Κ!'l_` u)Jxg\vJW|!j+EY?-Y~ЬU;('ESiոxl Z_%7®zy]6UB6/٭OY9p0ٝ[P^ Qq$AĜ3qAr`xB},!# d#v$FAiLsИ}La߁vHJvi2/y :+4N#&WLg,>V")䏐>,܇NO( 8a>YH{ބtuT?R—im ~ēi_EI ]NBY)a(ᵁvg0Y!꣈&*Fb74(6nokKG;Ej4AcUfk =CxM4RXIXug^f-%{R֖g|i/a 'oNt.%يM)DǪfIE(Q,Kye6#KA*-lR ̭͊ Dlo9/yC?"Y.-#I%jJ\ѸLHQʿc!#91WgVDr(Dka6WsK<"IT#dX LR]R(=e1OGdku.`a+:Xk \ަ e)#[ &FV+zI\C=wC8Mq׆UΛbI.,4Gtir"u}$L3YM¨pXyw_ l ݵg>ॅFν)Ҭ\kw6}u0SIiL2R+s#P^V`SWD,/g|dL\`]e2Yy;X1c|d7n{%> 3) :Ƭ6y"7Q'RcRӂc0qdeR*&wkε3KMteI7ax阇µ_A,*Z%LLnQFcD>YC$)m- ҫUH$gȭl3ABVZ]R&7yͳ|2KJAXr2›Pp>GKO]"gxIiM r$&F!XoA2Ns4eC7!E )'Hp F|MrtbcjgLR1#dVF fNZ[%:%MWo U!P6v%ѻB \tN!@SB?r502xxIp _Ӛw`N%2i_J<'y| p?C?i┫ vpB{W"\kmag [:8qCDkk}򕴓s7vՓ؞UM}U8Vq$Q-jy=7;=RV7J! 0#(Pk޷]\2,ۗ+)#yq-d, 5aT @}wM#%*hXVmDJp%Mp/Bgm+H]EJӥF>Y6yұJ`/f]*^!w$ȣtk!LHiuR]h78`zNSr!%bsgRfƅ:)S DMGGM[,W쾣Eb_^ Gu}y8zף^ݒcqT|<;fh2 Z6ܳL*Ki:}x/{*AO!zοbyJk9Un!&?j8A9M+(==`Dv"h;O&,6dc$|-+u J+$5G{F$gl&& TzDr0=Jr$X8%3ݞɓD}s3OQS<4y-trg#3B>}(\-$0ĽT!,o( dg~42YmrHy;תNɹo+ "C2+p?WtƍB5cS]D(4 2u$au;? Ɓ( \Y6 ؍Bغ/DvieO-mw1Oge]Ur'c$ۛ?\س0@+UWʻr{&`6^J RIvE$Ç%MG 8#*Jsq!A4O#=Ufuل|}fƱ#40 ]Eݨ5~!NL-Hgesz!ʼnaRX}|JPpi}(Xa&A &]2){;a40hmk-\9-RS(ߕ > ۦmU*!3VEN[m}6xAB9­8 iĞBR{p Z.: s"J~]OYG$ѻ˱V-S%7m%~'èƂ_ꀒ q1NR-$-ddpE2uՊ!Ƽwhi73GӁ$TY{  q1Dohz(-|uG$/kjpw9/i,RiiNJ!]ub㥔]؟_cOVSS"&c(]{Mg* .D!9~naOvE:0Nx~2][72W!}9>͛N NjQMjߔ.лe{&+`F$AYI辰a~c$ U MLV7牎lKtaQ^ vfYKJ+*&ʸ$- l œ_sqeIJJp/[y4cT^= ,(yrqŔ|w1MJҾ_RX.|+'vǏ ޫwWa$ 'ه?._uÎ)RʣB-ٮUrW!K k%Šoi}O*DO۱o\9CHTL+Yǻ4Qvh/D3`SVWȊXGzaD|i/ڦDTĔ/gr }t{?"grJߓde,! ՙb W5ͧ8F1eo{v* JW hz.0ߎĪ#oQ'%ah5#CRS8TNsJ3N$6GGi*|l&1ol \s$,|z$0sDg!!Ks$',lڃ"6.=irž V/^(_V}\= v2ȉHV+'1Aڽmpp +nWʀ}2{BxL;'! '7y{:4jvzA~~%4T@/Y>;ĈX C5{XP(5-O.a`i+|o\5/JEBE܋_Z0_2ykbj{B?} (sERal5O;([udYF?ɽ5'T'_;h8 Jd ͕:B洄kv=?oePb[ՐWכ6oFʅf?'rZIJ*فQyHa] %%M<ҹ-Od7͔IaT;]jrTzzE(CXKRp/MTAo!c/&&0K_N,o,R٧c>[4땙"K޷,`);vJLB;x'TSN7jSW&%5C9qwkM%IIԣ4jI:G@L?hVh(|gQAu,x++^Vd -JҀnb!EBO@SJN2vv&|ܐkp!aW53&T8~ս?@˘*0`SQ=W=e”T7v:F`څe*&{gvÓG[lFkub% |Y3jOi&38.;^YB쓎xhWTHw_ֶRd;3|`v#z&TZ3rd'f9 z>rKK/x8 .bL\c\n Ē$׸ڞ@>^œ̸Y\jΔuHV,+ٳ8igsA2t */hX_vaJ"Pkhh%6iɸ[7Kί:U3tԟ~ZAF7?SC
      Enjoying the preview?
      Page 1 of 1