Spring Security

Introduction to Spring Security

• What is Spring Security?
• Configuration of Spring security using Spring Boot
• Getting Started with Spring Security
• Understanding the default configuration

Spring Security Architecture

• Spring Security Core Components
• Authentication
• Access-Control (Authorization)
• Web security: FilterChainProxy and the filter chains
• Method Security
• HTTPS

Authenticating users

• The Spring Security API
• The Filter Chain
• Authentication Manager and Providers
• The Security Context
• Implementing UserDetailsService
• Password Encoding

Resource Authorization

• FilterSecurityInterceptor
• The AccessDecisionManager
• Voting
• Access-Decision Strategies
• Implementing AccessDecisionVoter
• The Role Prefix
• Forcing HTTPS

Method Authorization

• Using Spring AOP
• XML vs. Annotations
• @PreAuthorize and @PostAuthorize
• Spring EL for Authorization
• @PreFilter and @PostFilter
• Domain-Object Authorization

OAuth 2 for Spring Security

• Third-Party Authorization
• OAuth 2 roles and flows
• Access Tokens
• The AuthorizationEndpoint
• The TokenEndpoint
• Integration with Google OAuth API