Everything new in Spring Security 6 baked with a Spring Boot 3 recipe
summary
Covers concrete upgrade steps for Spring Security 6 on Spring Boot 3 and 3.1: WebSecurityConfigurerAdapter removed, replace with a SecurityFilterChain bean, use AuthorizedHttpRequests and RequestMatcher, and convert SpEL access checks to AuthorizationManager objects. Demonstrates building a minimal OAuth2 / OpenID Connect authorization server using the new authorization-server 1.0/1.1 and the Spring Boot starter, shows opaque vs JWT tokens, PKCE (S256) by default, keypair generation for JWKs, token introspection, and the new customizer-based DSL replacements.
AI-written summary · about
chapters (13)
- 0:00Introduction
- 3:36Spring Security 6 changes
- 8:34Upgrade to Spring Boot 3.0.6
- 13:54Spring Boot 3.1.0 and DSL
- 17:27Spring Authorization Server 1.0
- 19:37Minimal auth server setup
- 21:05Security filter chains config
- 25:05OAuth2 clients and tokens
- 29:44User management and passwords
- 32:12Testing with Postman
- 36:45JWT tokens and keys
- 42:54Q&A
- 49:27Closing remarks
related talks
46mEverything new in Spring Security 6 baked with a Spring Boot3 recipe
40mSpring Security 6: The Next Generation
48mThe new Spring Security
45mSpring Security: The Good Parts
33mSpring Security Patterns
43mIdentity crisis: bending Spring Security to your advanced use-cases
54mSpring Security Patterns
01h 52mSpring Security: The Good Parts