Skip to main content
Have a personal or library account? Click to login
Spring Security Cover

Spring Security

Effectively secure your web apps, RESTful services, cloud apps, and microservice architectures

Publisher:Packt Publishing Limited
By:   
Paid access
|Sep 2024
Product purchase options
This title is not yet available for download
Description

Leverage the power of Spring Security 6 to protect your modern Java applications from hackers

Key Features

  • Architect solutions that leverage Spring Security while remaining loosely coupled
  • Implement authentication and authorization with SAML2, OAuth 2, hashing, and encryption algorithms
  • Integrate Spring Security with technologies such as microservices, Kubernetes, the cloud, and GraalVM native images
  • Purchase of the print or Kindle book includes a free PDF eBook

Book Description

With experienced hackers constantly targeting apps, properly securing them becomes challenging when you integrate this factor with legacy code, new technologies, and other frameworks. Written by a Lead Cloud and Security Architect as well as CISSP, this book helps you easily secure your Java apps with Spring Security, a trusted and highly customizable authentication and access control framework.
The book shows you how to implement different authentication mechanisms and properly restrict access to your app. You’ll learn to integrate Spring Security with popular web frameworks like Thymeleaf and Microservice and Cloud services like Zookeeper and Eureka, along with architecting solutions that leverage its full power while staying loosely coupled. You’ll also see how Spring Security defends against session fixation, moves into concurrency control, and how you can use session management for administrative functions. This fourth edition aligns with Java 17/21 and Spring Security 6, covering advanced security scenarios for RESTful web services and microservices. This ensures you fully understand the issues surrounding stateless authentication and discover a concise approach to solving those issues.
By the end of this book, you’ll be able to integrate Spring Security 6 with GraalVM native images seamlessly, from start to finish.

What you will learn

  • Understand common security vulnerabilities and how to resolve them
  • Implement authentication and authorization and learn how to map users to roles
  • Integrate Spring Security with LDAP, Kerberos, SAML 2, OpenID, and OAuth
  • Get to grips with the security challenges of RESTful web services and microservices
  • Configure Spring Security to use Spring Data for authentication
  • Integrate Spring Security with Spring Boot, Spring Data, and web applications
  • Protect against common vulnerabilities like XSS, CSRF, and Clickjacking

Who this book is for

If you’re a Java web developer or an architect with fundamental knowledge of Java 17/21, web services, and the Spring Framework, this book is for you. No previous experience with Spring Security is needed to get started with this book.

Table of Contents

  1. Anatomy of an Unsafe Application
  2. Getting Started with Spring Security
  3. Custom Authentication
  4. JDBC-based Authentication
  5. Authentication with Spring Data
  6. LDAP Directory Services
  7. Remember-me Services
  8. Client Certificate Authentication with TLS
  9. Opening up to OAuth 2
  10. SAML 2 Support
  11. Fine-Grained Access Control
  12. Access Control Lists
  13. Custom Authorization
  14. Session Management
  15. Additional Spring Security Features
  16. Migration to Spring Security 6
  17. Microservice Security with OAuth 2 and JSON Web Tokens
  18. Single Sign-On with the Central Authentication Service
  19. Build GraalVM Native Images
  20. Appendix – Additional Reference Material
https://github.com/PacktPublishing/Spring-Security-Fourth-Edition
PDF ISBN: 978-1-83546-011-5
Publisher: Packt Publishing Limited
Copyright owner: © 2024 Packt Publishing Limited
Publication date: 2024
Language: English
Pages: 596
Related subjects:
Computer sciences,
IT-security and cryptology
BISAC subjects:
COM053000,
COM051280,
COM060180
Thema subjects:
UR,
UMX,
UMWS

People also read