Spring Security: The Good Parts
summary
Explains concrete Spring Security 6 details: replace WebSecurityConfigurerAdapter with a security filter chain bean, uses ordered servlet filters to block or augment requests (demoed a button filter and CSRF filter), shows building a robot auth filter that accepts X-Robot-Password = "beep boop" and sets a RobotAuthenticationToken, and adds a Daniel AuthenticationProvider that lets "Daniel" bypass password checks; config supports form login, HTTP Basic and OAuth2 SSO (Google); logging and authentication events are emitted and the demos work end-to-end.
AI-written summary · about
chapters (8)
- 0:00Introduction and setup
- 3:06Building blocks overview
- 7:08Understanding security filters
- 14:29Real-world filter implementation
- 21:07Authentication basics
- 25:46Custom authentication filters
- 32:41Authentication providers
- 39:13Conclusion and resources
related talks
54mSpring Security Patterns
33mSpring Security Patterns
01h 52mSpring Security: The Good Parts
46mEverything new in Spring Security 6 baked with a Spring Boot3 recipe
52mArchitecture Deep Dive in Spring Security
40mSpring Security 6: The Next Generation
01h 02mSpring Security 5: The Reactive Parts - Rob Winch
51mEverything new in Spring Security 6 baked with a Spring Boot 3 recipe