Spring Security - Lesson 23 - Configuring endpoint authorization

preview_player
Показать описание
The Spring Security stream will teach you how to use Spring Security, from the basic authentication and authorization architecture to using OAuth 2.

Рекомендации по теме
Комментарии
Автор

Until now that i officially have a big shoutout to you ! my fav teacher
Can't believe that i have been mentored by the "Spring Security in Action"s author for free !
Congratulate on your wonderful book ! keep doing good work <3
I'm writing this just showing you my appreciation ! tips & trick that you gave in the video is priceless and saved me lots of money instead of buying Baeldung's Course

trungthinh
Автор

Everytime watching your videos i can not to say "bro you damn so good" thanks )

sergeyshamiryan
Автор

⭐ Timestamps ⭐
- 9:00 AuthorizationFilter Class Diagram
- 19:00 AuthorizationFilter Implementation
- 31:20 End points Authorization Rules , Matcher Method Intro
- 42:00 Scenariso where denyAll() is useful
- 58:00 Authority vs Role in Authorization

cooool
Автор

Just finished all spring security lessons in 3 days, i wish you could make videos every day :(

adnaanrose
Автор

Hi Laurentiu, Youtube still posts your lessons in 720p. Is that something you can configure in Youtube to go back to 1080p lessons? it's hard to read some of the text on your IDE, etc when it stays locked-in at 720p.

BinSlayer
Автор

Sir I know why at 50:00 postman still was able to get you a response even after you deleted the Authorization header, I experienced with that
That is bcz postman saves the session that was sent from the previous request and sends it back and somehow spring uses that session instead of Authorization header to authenticate the user and that why you can get back a response even if you didn't send the Authorization header
to prove my point just delete the session from the header in the request which does not have Authorization header and you will get a 401 response

haidarrmehsen
Автор

Nice explanation sir,

I have one qs.
Lets say multiple Microservices calling each other. We have zuul server too. We provided security at zuul level. But we want method level security too( for few Microservice has admin right or few don't have)
Then how we will send credentials or token from zuul to different Microservices. How we pre-authorize work at method level in Microservices

vivekguptacs
Автор

Question on HMAC: does spring security provide anything to work with it? I can't seem to find anything on the subject.

evgeniyas
Автор

Can you please help me out in customizing /oauth/authorize url. I want to override approveOrDeny() method of AuthorizationEndpoint using CustomAuthorizationEndpoint class that extends AuthorizationEndpoint.

sagargauda_flutist