Getting Started with Spring Security 3.1
summary
A simple messages app gets Spring Security 3.1 wired in step by step: add Maven deps, register DelegatingFilterProxy in web.xml, use the FilterChainProxy to map many security filters, and boot an in-memory authentication user/password so the site requires login. The demo shows default and custom login pages, logout, and method-level security (pre/post annotations) to stop URL-bypass attacks; XML examples run cleanly, Java-config builder support is shown as a beta branch on GitHub.
AI-written summary · about
chapters (13)
- 0:00Introduction to Spring Security
- 4:58Servlet filter fundamentals
- 11:21Setting up the application
- 17:17Security configuration flow
- 23:55URL matching and protection
- 33:19Authentication mechanics
- 40:25Customizing the login experience
- 46:47MVC integration and logic
- 54:22Advanced configuration
- 59:03JSP tag libraries
- 1:04:51Method level security
- 1:14:08Future: Java configuration
- 1:21:14Q&A session
related talks
33mSpring Security Patterns
54mSpring Security Patterns
52mSpring Security for N00bz: A quick introduction for the terminally insecure
52mArchitecture Deep Dive in Spring Security
45mSpring Security: The Good Parts
57mSpring Security for N00bz: A quick introduction for the terminally insecure
01h 27mHands on Spring Security
46mEverything new in Spring Security 6 baked with a Spring Boot3 recipe