Spring Security Fundamentals - Lesson 2 - Managing users

In this stream, we discuss Spring Security using the latest available version in 2022. We'll discuss configurations for authentication and authorization, tips and tricks, how to learn Spring Security, vulnerabilities, OAuth 2, and many more.

[laurspilca]

Guyz. Thanks to @Vikash Kumar we found out what I was doing wrong on the @ManyToMany mapping. It seems by mistake I was naming the columns in the database with camelCase instead of underline (which is what JPA expects). Thanks so much, @Vikash for your help! Cheers!

[fatihozerol]

thank you very much, so many tutorials just a bunch of code without explaining why and what we are doing. that's the first guide that explains the inner mechanism.

[AbhishekKumarSrivastava-jpbh]

Thanks a lot Laur for sharing these hard-earned experience with us

[lunatichigh]

Thank you sir. I have undergone spring security from other resources, but I felt like I needed to update my knowledge about that scope. Your videos are internet gold.

[jaysizmir]

Thank you Laur for the details explanation !

[ahmeterdonmez]

God had created you as a teacher really. I could not understand this subject even from the tutorials with my native language. Could you please make a real full-stack project including all these infos? Thank you...

[momedalhouma]

Hello and thank you for the great lesson. I liked the way you implemented the full logic, sometimes in the past you were omitting implementing the part of granted authorities(you were just hardcoding the granted authorities, this time you showed the full details and it helped me a lot. I hope whenever you make examples you try to build the full flow.

[pgh]

In jpa, when we mention a name by ourself, then the camelCase gets converted into camel_case inside the database . Thats why it was giving error. Because the table you created in db had same camelCase naming . but when when jpa tries to find in the db for userId it actually searches user_id.

[deadsoul]

Thakyou Laur, you are amazing. thankyou for having these sessions. I learn a lot from them.

[marynaovechkina]

Hello! These lessons are amazing! Thank you!

[josephkayode]

Hi laur. Great video as usual. The filter chain really looks like the decorator design pattern.

[KamilZgon]

Thank you, this playlist is very helpfull.

[edwinmcc]

The problem around 59:46 is because Hibernate uses 'snake case / camel case " mapping to the database columns . . This is the fix : in your app.yml files . .

[renukumar]

57:25 The issue got fixed when i changed from userId to userid and authorityId to authorityid, i think spiring maps userId from entity to user_id and userid to USERID or userid as database is not case sensitive. in sql the below three statements are same
1)select userid from ss_lesson2.users_authorities;
2)select userId from ss_lesson2.users_authorities;
3)select USERID from ss_lesson2.users_authorities;

so spring maps userId to user_id and userid to userid as userid, userId and USERID are same in db

[ArcReactAngle]

I don't where I went wrong but I followed same instruction in case of ManytoMany mapping on db query I'm getting my authorities as empty list

[kirillmcquillin]

How do we go about registering a new user? This is the topic I find most challenging in Spring Security.

[videolezioni]

Hi laurentiu, I have a quick question, is the dispatcher servlet part of the filter chain? Thank you so much for you lessons!

[Robcuisimplu]

Great lesson Laurentiu! Thank you. I have to ask if everybody has a delayed video? or it's just for me

[sgwuerzbubi]

Regarding the eager-fetch of the authorities. Why don't you use JPQL to eagerly fetch the join for the _findUserByUsername_ query?
Considering, the authorities are probably uninteresting for non-security related interactions with the User-entity, one could save many unnecessary joins whenever you access the User.

[h.]

Hi thank you for this amazing lesson!!! 
I have one question:
- are the username and password important only for the first http request? Because I noticed that if I change password after I log in I still get a 200 OK. 
Can't wait for next lesson 😀