~/talk

Spring Security for N00bz: A quick introduction for the terminally insecure

Talkat Jfokus 2019 · 2019-02-04..02-06· [security, java]
slides:none on file

Live-coding shows how to add Spring Security to a Spring Boot app: enable HTTP firewall and security filter chain, add form login with an in‑memory UserDetailsService, fix plain‑text passwords by adding a bcrypt delegating password encoder, and require role checks for /admin; demo runs and forbids non‑admin users. Then OAuth2/OpenID Connect logins via Google and Okta are wired, a resource server validates JWTs and returns claims, and a WebClient uses ServletOAuth2AuthorizedClientExchangeFilterFunction to call protected APIs.

AI-written summary · about

  1. 0:00Start
  2. 0:41Takeaways
  3. 3:09A few thoughts on system security
  4. 6:05Spring Security 3000 meter view
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.