en
fr
IT Training

Spring Security

This course teaches attendees how to secure their applications using Spring security. The course covers all of the fundamentals of Spring Security and its integration with Spring boot. Through hands-on exercises, you’ll practice how to implement authentication and authorization, client integration with taglibs as well as method level permissions, and forcing connections over HTTPS.

Who should attend this course?

Java Developers, Java Application Architects

Prerequisites

Participants should have experience with Java and Spring Core development.

This course teaches attendees how to secure their applications using Spring security. The course covers all of the fundamentals of Spring Security and its integration with Spring boot. Through hands-on exercises, you’ll practice how to implement authentication and authorization, client integration with taglibs as well as method level permissions, and forcing connections over HTTPS.

Introduction to Spring Security

  • What is Spring Security?
  • Configuration of Spring security using Spring Boot
  • Getting Started with Spring Security
  • Understanding the default configuration

Spring Security Architecture

  • Spring Security Core Components
  • Authentication
  • Access-Control (Authorization)
  • Web security: FilterChainProxy and the filter chains
  • Method Security
  • HTTPS

Authenticating users

  • The Spring Security API
  • The Filter Chain
  • Authentication Manager and Providers
  • The Security Context
  • Implementing UserDetailsService
  • Password Encoding

Resource Authorization

  • FilterSecurityInterceptor
  • The AccessDecisionManager
  • Voting
  • Access-Decision Strategies
  • Implementing AccessDecisionVoter
  • The Role Prefix
  • Forcing HTTPS

Method Authorization

  • Using Spring AOP
  • XML vs. Annotations
  • @PreAuthorize and @PostAuthorize
  • Spring EL for Authorization
  • @PreFilter and @PostFilter
  • Domain-Object Authorization

OAuth 2 for Spring Security

  • Third-Party Authorization
  • OAuth 2 roles and flows
  • Access Tokens
  • The AuthorizationEndpoint
  • The TokenEndpoint
  • Integration with Google OAuth API

Practical information

Duration

3 Days

Languages

EN

Price

€ 1450 + 3% VAT

Location

Classroom Course

Schedule

Guaranteed to run

Sessions in English
29 - 31/2/2024Book
27 - 29/5/2024Book
16 - 18/10/2024Book
02 - 04/12/2024Book

Share this course on

Book your training

Enter your information to confirm your booking.

    You might also be interested in

    IT Training
    N° 55354 – Administering Office 365
    11 - 15/3/2024, 17 - 21/6/20 ...
    This course is the Community Courseware equivalent of retired course MS-030 – Office 365 Administrator. This five-day course describes how…
    IT Training
    N° 55343 – Networking with Windows Server
    22 - 26/1/2024, 22 - 26/4/20 ...
    55343A is the equivalent of the retired legacy MOC Course 20741BC – Networking with Windows Server 2016. This 5-day classroom-based…

    Prerequisite test

    Take the test

    Looking for a tailor made solution?

    Get started with personal training