Includes index

This book shows you how to prevent cross-site scripting and request forgery attacks before they do damage. You'll start with the basics, simulating password upgrades and adding multiple types of authorization. As your skills grow, you'll adapt Spring Security to new architectures and create advanced OAuth2 configurations. By the time you're done, you'll have a customized Spring Security configuration that protects against threats both common and extraordinary

Part 1.

First steps. 1. Security today --

2.

Hello Spring security --

Part 2.

Implementation. 3. Managing users --

4.

Dealing with passwords --

5.

Implementing authentication --

6.

Hands-on : a small secured web application --

7.

Configuring authorization : restricting access --

8.

Configuring authorization : applying restrictions --

9.

Implementing filters --

10.

Applying CSRF protection and CORS --

11.

Hands-on : a separation of responsibilities --

12.

How does OAuth 2 work? --

13.

OAuth 2: implementing the authorization server --

14.

OAutho 2: implementing the resource server --

15.

OAuth 2: Using JWT and cryptographic signatures --

16.

Global method security : pre- and postauthorizations --

17.

Global method security : pre- and postfiltering --

18.

Hands-on : an OAuth 2 application --

19.

Spring security for reactive apps --

20.

Spring security testing