Spring Security - Decoding and Demystifying
summary
An introduction to Spring Security as the standard library for securing Spring-based web applications, explaining its default protections, configuration options and extension points. It covers the library's overall architecture, core patterns and common abstractions, and gives a methodical approach to understand, customize and extend Spring Security for non-standard use cases.
AI-written summary · about
chapters (19)
- 0:00Introduction
- 1:27Conference goals
- 2:49Spring Security demo
- 8:13Auth & authz
- 11:50Demo & config
- 23:13Security internals
- 23:56Authentication & context
- 33:50Servlet filters
- 39:04Custom filter
- 54:20CSRF protection
- 1:00:04Debugging traces
- 1:02:31Auth Providers
- 1:17:46Break
- 1:18:06Recap & deep dive
- 1:35:00Events & post-processing
- 1:51:10Configurers usage
- 2:00:46Post-processors
- 2:12:38Spring Security 6
- 2:20:07Q&A
related talks
01h 52mSpring Security: The Good Parts
41mSpring Security: the everyday and the non-obvious
54mSpring Security Patterns
45mSpring Security: The Good Parts
33mSpring Security Patterns
52mArchitecture Deep Dive in Spring Security
01h 31mGetting Started with Spring Security 3.1
57mSpring Security for N00bz: A quick introduction for the terminally insecure