Spring Security Patterns
summary
Starts from an unsecured Spring Boot app, adds spring-boot-starter-security and shows Spring Security’s filter chain and its per-filter decision to terminate requests; demonstrates the default randomly generated user password and replacing it with a UserDetailsService bean; inspects trace logs to show authentication flow and the thread‑local security context holder; switches to a resource server using spring‑authorization‑server, implements a custom JWT authorities converter, highlights immutability and composition over inheritance, and compares declarative method security vs a centralized DSL.
AI-written summary · about
chapters (19)
- 0:00Intro
- 0:39Welcome
- 1:18Introduction
- 1:53Overview
- 2:35Spring Security
- 3:00Spring Boot
- 4:40Defaults
- 6:24Secure by Default
- 8:07Least Privilege
- 9:38Privileged Information
- 11:17User Details Service
- 13:12Component Based Configuration
- 15:25Validate the Users
- 20:52Security Context Holder
- 23:02Request Thread Local
- 26:57Dependency Injection
- 30:42Spring Authorization Server
- 38:22ComponentBased Configuration
- 52:47Conclusion
related talks
33mSpring Security Patterns
45mSpring Security: The Good Parts
52mArchitecture Deep Dive in Spring Security
52mSpring Security for N00bz: A quick introduction for the terminally insecure
01h 31mGetting Started with Spring Security 3.1
46mEverything new in Spring Security 6 baked with a Spring Boot3 recipe
51mEverything new in Spring Security 6 baked with a Spring Boot 3 recipe
01h 52mSpring Security: The Good Parts