Security with Spring Series
Last updated: January 18, 2024
Mocking is an essential part of unit testing, and the Mockito library makes it easy to write clean and intuitive unit tests for your Java code.
Get started with mocking and improve your application tests using our Mockito guide:
Handling concurrency in an application can be a tricky process with many potential pitfalls. A solid grasp of the fundamentals will go a long way to help minimize these issues.
Get started with understanding multi-threaded applications with our Java Concurrency guide:
Spring 5 added support for reactive programming with the Spring WebFlux module, which has been improved upon ever since. Get started with the Reactor project basics and reactive programming in Spring Boot:
Since its introduction in Java 8, the Stream API has become a staple of Java development. The basic operations like iterating, filtering, mapping sequences of elements are deceptively simple to use.
But these can also be overused and fall into some common pitfalls.
To get a better understanding on how Streams work and how to combine them with other language features, check out our guide to Java Streams:
Explore Spring Boot 3 and Spring 6 in-depth through building a full REST API with the framework:
Yes, Spring Security can be complex, from the more advanced functionality within the Core to the deep OAuth support in the framework.
I built the security material as two full courses - Core and OAuth, to get practical with these more complex scenarios. We explore when and how to use each feature and code through it on the backing project.
You can explore the course here:
Spring Data JPA is a great way to handle the complexity of JPA with the powerful simplicity of Spring Boot.
Get started with Spring Data JPA through the guided reference course:
Refactor Java code safely — and automatically — with OpenRewrite.
Refactoring big codebases by hand is slow, risky, and easy to put off. That’s where OpenRewrite comes in. The open-source framework for large-scale, automated code transformations helps teams modernize safely and consistently.
Each month, the creators and maintainers of OpenRewrite at Moderne run live, hands-on training sessions — one for newcomers and one for experienced users. You’ll see how recipes work, how to apply them across projects, and how to modernize code with confidence.
Join the next session, bring your questions, and learn how to automate the kind of work that usually eats your sprint time.
If you're working on a Spring Security (and especially an OAuth) implementation, definitely have a look at the Learn Spring Security course:
>> LEARN SPRING SECURITYThe Security with Spring tutorials focus, as you’d expect, on Spring Security.
Get started with the Registration series if you’re interested in building a registration flow, and understanding some of the frameworks basics.
Then, explore authentication and other Spring Security internals in-depth.
Finally, have a look at some of the more advanced topics, such as the OAuth support.
.
.
.
.
.
Registration with Spring Security
.
.
.
.
.
Authentication with Spring Security
- Spring Security Form Login
- Spring Security Basic Authentication
- Spring Security Authentication Provider
- How to Manually Authenticate User with Spring Security
- Spring Security Custom AuthenticationFailureHandler
- Spring Security Login Page with React
- Spring Security: Upgrading the Deprecated WebSecurityConfigurerAdapter
- Securing Spring Boot API With API Key and Secret
- Securing Spring Boot Applications With SSL Bundles
- Two Factor Auth with Spring Security
- Authenticating Users with AzureAD in Spring Boot
.
.
.
.
.
Authorization with Spring Security
- Introduction to Spring Method Security
- Spring Security – Roles and Privileges
- Intro to Spring Security Expressions
- A Custom Security Expression with Spring Security
- Spring Security: Check If a User Has a Role in Java
- Granted Authority Versus Role in Spring Security
.
.
.
.
.
Core Spring Security
- Spring Boot Security Auto-Configuration
- Retrieve User Information in Spring Security
- Spring Security – permitAll() and web.ignoring()
- Control the Session with Spring Security
- A Custom Filter in the Spring Security Filter Chain
- Handle Spring Security Exceptions With @ExceptionHandler
- Enable Logging for Spring Security
- SAML with Spring Boot and Spring Security
- Disable Security for a Profile in Spring Boot
- A Guide to CSRF Protection in Spring Security
- Prevent Cross-Site Scripting (XSS) in a Spring Application
.
.
.
.
.
OAuth2 with Spring Security
.
.
.
.
.
Other Spring Tutorials
.
.
.
.
.
