Architect solutions that leverage Spring Security while remaining loosely coupled
Implement authentication and authorization with SAML2, OAuth 2, hashing, and encryption algorithms
Integrate Spring Security with technologies such as microservices, Kubernetes, the cloud, and GraalVM native images
Purchase of the print or Kindle book includes a free PDF eBook

Description

With experienced hackers constantly targeting apps, properly securing them becomes challenging when you integrate this factor with legacy code, new technologies, and other frameworks. Written by a Lead Cloud and Security Architect as well as CISSP, this book helps you easily secure your Java apps with Spring Security, a trusted and highly customizable authentication and access control framework. The book shows you how to implement different authentication mechanisms and properly restrict access to your app. You’ll learn to integrate Spring Security with popular web frameworks like Thymeleaf and Microservice and Cloud services like Zookeeper and Eureka, along with architecting solutions that leverage its full power while staying loosely coupled. You’ll also see how Spring Security defends against session fixation, moves into concurrency control, and how you can use session management for administrative functions. This fourth edition aligns with Java 17/21 and Spring Security 6, covering advanced security scenarios for RESTful web services and microservices. This ensures you fully understand the issues surrounding stateless authentication and discover a concise approach to solving those issues. By the end of this book, you’ll be able to integrate Spring Security 6 with GraalVM native images seamlessly, from start to finish.

Who is this book for?

If you’re a Java web developer or an architect with fundamental knowledge of Java 17/21, web services, and the Spring Framework, this book is for you. No previous experience with Spring Security is needed to get started with this book.

What you will learn

Understand common security vulnerabilities and how to resolve them
Implement authentication and authorization and learn how to map users to roles
Integrate Spring Security with LDAP, Kerberos, SAML 2, OpenID, and OAuth
Get to grips with the security challenges of RESTful web services and microservices
Configure Spring Security to use Spring Data for authentication
Integrate Spring Security with Spring Boot, Spring Data, and web applications
Protect against common vulnerabilities like XSS, CSRF, and Clickjacking

What do you get with eBook?

Instant access to your Digital eBook purchase

Download this book in EPUB and PDF formats

Access this title in our online reader with advanced features

DRM FREE - Read whenever, wherever and however you want

AI Assistant (beta) to help accelerate your learning

Frequently bought together

$39.99

Modern API Development with Spring 6 and Spring Boot 3

$44.99

$39.99

Total $ 124.97

Erica Jul 25, 2024

Besides testing, security and authentication is definitely my weakest point 😮‍💨, and since I'm generally bothered by not being good at things 😒, I've been actively trying lately to get better at it.One of the ways I'm trying to achieve this is by purposely working on tasks in areas that I would like to improve in. Unfortunately, the project I'm currently working on is using a different tech stack than what I'm used to 🫤, and since I'd obviously like to get better working with my own tech stack as well, I decided to dive into "Spring Security". 😊So one of the first things that the book covers that I found useful is the different authentication methods. This section helped me to prepare a Confluence document to go over with the dev team so we could make a decision on which authentication method to use for our project.Another thing I found really useful was that the book explains the pros and cons of using 'SecurityContextHolder', 'UserDetailsService', and 'AuthenticationProvider'. It explains the use cases for each one (Yay! I'm learning about use cases! 😁🥳😅), like whether you're looking for simplicity or need more advanced features like remember-me services.Technically, I'm already familiar with most of those things because I learned how to implement them when I was in bootcamp. But to be honest, the bootcamp was really in-depth up until we started learning about security, and then it was kinda just like "Here's some snippets of code. Put this in such-and-such class". 😕 So it's a good thing that the book also walks you through adding, configuring, and implementing a custom 'UserDetailsService'.I also got a deep dive into OAuth 2 which previously, I honestly knew nothing about. 🥴😅 The book shows how to set up your own OAuth 2 application and explains the architecture behind it, which was great for a complete n00b like me. 🥴🤣😂It also went into the advanced features of Spring Security, like protection against Cross-Site Request Forgery (CSRF) and other common vulnerabilities (which was great because the whole CSRF thing consistently kicks my ass every time I have to link a backend to a frontend for a full stack application 😭🤣😂💀☠️). So I was pretty grateful for this section.The book also details how to configure security headers and goes into setting up security filter chains and using JWTs for securing endpoints. This part was especially helpful since JWT is what I'm most familiar with.The section on password encoding was definitely helpful because I'm a dunce when it comes to that too. 🥴😅 Thankfully, the book guides you on how to use PasswordEncoders for different security needs.Honestly, I think this book is a great resource for anyone who struggles with understanding Spring Security and I'd definitely recommend it! 👌🏽

Amazon Verified review

SOORAJ G THOMAS Jul 24, 2024

Spring Security by Badr Nasslahsen is an essential addition to any developer’s library. Whether you're new to Spring Security or looking to enhance your existing knowledge, this book provides the tools and insights needed to secure your applications effectively. Highly recommended!

GYANARANJAN Jul 23, 2024

This book is great guide to get started with spring security. It explains well how to setup security configurations and how to configure security during deployment. I recommend this to beginners wanting to learn spring security.

Jorge Deflon Jul 15, 2024

Software supports the modern economy, and ensuring application security is an increasingly important activity.Spring Security is a fundamental component of the most popular framework for developing enterprise applications: Spring.This book covers in a comprehensive and easy-to-understand way how to use this module to develop easily secure and reliable enterprise java applications.A guide that should not be missing in your arsenal

Spring Security: Effectively secure your web apps, RESTful services, cloud apps, and microservice architectures , Fourth Edition

What do you get with eBook?

Spring Security

Part 1: Fundamentals of Application Security

Page 1 of 1

Key benefits

Description

Who is this book for?

What you will learn

Product Details

What do you get with eBook?

Product Details

Frequently bought together

Table of Contents

Recommendations for you

Customer reviews

About the author

FAQs

Spring Security: Effectively secure your web apps, RESTful services, cloud apps, and microservice architectures , Fourth Edition

What do you get with eBook?

Key benefits

Description

Who is this book for?

What you will learn

Product Details

What do you get with eBook?

Product Details

Packt Subscriptions

Frequently bought together

Table of Contents

Recommendations for you

Customer reviews

About the author

FAQs