Spring Security Fundamentals - Lesson 19 - CORS

In this stream, we discuss Spring Security using the latest available version in 2022. We'll discuss configurations for authentication and authorization, tips and tricks, how to learn Spring Security, vulnerabilities, OAuth 2, and many more.

[fiorini_mochachino]

I think I can hear a squeaky bird somewhere in your room. Maybe you should consider oiling it. 😜
On a serious note, another excellent and to the point lesson! You set a very high standard for all the teachers out there! 👍

[Sebastian-zscp]

do you have a link to the list of what the origins use e.g. “Authorization”, “Content-Type”, “x-xsrf-token” etc. or how do i search to get a big picture?

[khajalieubarrie]

Thanks for these lessons. You’re a very good teacher. Just to be clear, is the CORS default restriction actually a good thing and using the annotation to ease that restriction isn’t always advised?

[xichen]

Hi Laur, isn't it so that cors restriction is checked by the browser? Then, you configure the cors (34:28) on the backend side, how does the configuration take effect on the browser side? I try to link the browser behaviour with this backend cors configuration, but can't wrap my head around it. Could you please elaborate this flow?

[lts]

If we don't expose any api, I mean if we have a server side rendering, we will not need to enable CORS? That is true?

[zehmhzg]

Thanks for the videos. I wan't to know order of this lives are compatible with order of "spring security in action" chapters? Can i start them toghether?

[siyu]

Can you make video on delegating to some other filter after successful authentication in oauth2.0? For eg 2fa filter bean

[mihirsawant]

Why not to enable CORS (*) in prod if let's say I have my APIs secured by jwt for each one?

[a.m.jyotiprakashsahu]

sir, please make a video on Spring security 6 with Keycloak using OpenID.