Everything new in Spring Security 6 baked with a Spring Boot3 recipe
summary
Covers concrete upgrade steps from Spring Boot 3 / Spring Security 6: WebSecurityConfigurerAdapter removed and replaced by a SecurityFilterChain bean; chaining-style APIs become customizer lambdas and requestMatchers replaces ant/mvcMatchers; access now accepts an AuthorizationManager or the backward-compatible WebExpressionAuthorizationManager. Builds a minimal OAuth2 / OpenID Connect authorization server with spring-authorization-server, in-memory RegisteredClient and UserDetails, default JWK demo keys, exercises the .well-known and token endpoints successfully.
AI-written summary · about
chapters (11)
- 0:00Spring Security 6 updates
- 1:02Why Spring Security 6 matters
- 2:04Removing WebSecurityConfigurerAdapter
- 3:49New SecurityFilterChain config
- 5:55Replacing Ant/MVC matchers
- 7:41Access method and AuthorizationManager
- 10:30Live Spring Boot upgrade demo
- 18:13Introducing Spring Authorization Server
- 21:25Minimal authorization server
- 35:53Testing the auth server
- 40:27Q&A
related talks
51mEverything new in Spring Security 6 baked with a Spring Boot 3 recipe
40mSpring Security 6: The Next Generation
45mSpring Security: The Good Parts
54mSpring Security Patterns
33mSpring Security Patterns
48mThe new Spring Security
51mServers, OAuth Client, SecurityFilterChain and More with Spring Security
52mArchitecture Deep Dive in Spring Security