Spring Security | FULL COURSE

Spring Security is a powerful and highly customisable authentication and access-control framework. It is the de-facto standard for securing Spring-based applications.

Spring Security is a framework that focuses on providing both authentication and authorization to Java applications. Like all Spring projects, the real power of Spring Security is found in how easily it can be extended to meet custom requirements

In this full course you will learn everything in detail about Spring Security. Before you begin this course you need to at least have a basic knowledge about Java and Spring Boot.

⭐ Timestamps ⭐

00:00 INTRO
01:48 QUICK WORD BEFORE WE BEGIN
02:33 BOOTSTRAPPING
05:47 RUNNING APP WITH INTELLIJ
10:19 - LETS BUILD AN API
17:12 - INSTALLING SPRING SECURITY
20:16 - FORM BASED AUTHENTICATION OVERVIEW
25:28 - BASIC AUTH OVERVIEW
28:39 - BASIC AUTH
34:12 - POSTMAN
38:06 - ANT MATCHERS
42:37 - APPLICATION USERS
45:51 - IN MEMORY USER DETAILS MANAGER
50:39 - PASSWORD ENCODING WITH BCRYPT
56:05 - ROLES AND PERMISSIONS
59:05 - ADMIN USER
1:01:51 - ROLES & PERMISSIONS USING ENUMS
1:10:08 - ROLE BASED AUTHENTICATION
1:16:22 - PERMISSION BASED AUTHENTICATION
1:25:58 - DISABLING CSRF
1:32:54 - hasAuthority()
1:36:49 - ADDING AUTHORITIES TO USERS
1:45:22 - PERMISSION BASED AUTHENTICATION IN ACTION
1:48:37 - ORDER DOES MATTER
1:51:11 - preAuthorize()
1:56:57 - UNDERSTANDING CSRF
2:03:30 - CSRF TOKEN
2:08:10 - HOW CSRF TOKEN GENERATION WORKS
2:12:29 - LETS DISABLE CSRF AGAIN
2:14:10 - FORM BASED AUTHENTICATION
2:17:15 - ENABLE FORM BASED AUTHENTICATION
2:20:39 - SESSION ID
2:24:20 - CUSTOM LOGIN PAGE
2:32:30 - REDIRECT AFTER SUCCESS LOGIN
2:35:04 - REMEMBER ME
2:40:00 - REMEMBER ME COOKIE AND EXTRA OPTIONS
2:45:20 - LOGOUT
2:53:41 - LOGOUT BUTTON
2:58:00 - PASSWORD, USERNAME, REMEMBER-ME PARAMETERS
3:00:29 - DB AUTHENTICATION OVERVIEW
3:09:00 - APPLICATION USER CLASS
3:09:17 - APPLICATION USER SERVICE
3:10:21 - APPLICATION USER CLASS
3:11:43 - APPLICATION USER DAO INTERFACE
3:15:00 - FAKE APPLICATION USER SERVICE
3:25:19 - DAO AUTHENTICATION PROVIDER
3:33:54 - HELLO
3:35:24 - INTRO TO JSON WEB TOKEN (JWT)
3:42:30 - JWT LIBRARY
3:46:16 - JwtUsernameAndPasswordAuthenticationFilter - attemptAuthentication()
3:54:34 - JwtUsernameAndPasswordAuthenticationFilter - successfulAuthentication
4:01:45 - REQUEST FILTERS
4:04:06 - FILTERS AND STATELESS SESSIONS
4:08:02 - JWT USERNAME AND PASSWORD FILTER
4:14:36 - JWT TOKEN VERIFIER FILTER
4:29:49 - JWT TOKEN VERIFIER FILTER IN ACTION
4:39:10 - JWT CONFIG
4:49:24 - JWT CONFIG IN ACTION
4:55:00 - QUICK WORD ABOUT JWT

⭐️ FEW MORE THINGS BEFORE I FORGET ⭐️

Catch you on the next one...

[simonbolivar]

dude i came 1 week later just to tell that thanks to you, in my work seniors programmers thinks im some kind genius or something just because i saw this, and i have only 1 week in my work, im really thankful.

[midasama]

Your course is just amazing, and the fact that you're basically putting it our for free is even more.

[JimmyHeller]

I'm a senior java developer and this course by far, is the best one about security. I wanted to know one thing but I ended up watching whole thing from the start. Appreciate your content and how easily you teach and make things happen. loved it!

[nathanielwoodbury]

Bro this is absolutely unbelievable. I have never found a channel this good for teaching Java Spring. Please continue these, you're shaping other's careers!

[dvt]

Content is awesome and your voice is super relaxing... great tutorial, man! :)

[doloreshaze]

I am deaf and cannot hear, could you please enable autogenerated subtitles?

[eugenekostyukevich]

I am amazed how good this course is! Especially JWT part, very much appreciated! There are lots of guides/tutorials online on JWT in Spring security, however none of them demonstrates JWT-SpringSecurity integration in the way you did (obviously correct one)! Many thanks and I'm a sub from now!

[davidhegland]

I was reading a stackoverflow post about spring security and my brain was playing it in your voice LOL.
You do great work, your organization of concepts is excellent, detailed, and easy to follow. I sincerely hope you are getting good ad revenue from this video and from all of them, you deserve to get paid. Thanks for all you do. I'm very glad I found your channel.

[asennikolaev]

The best tutorial on spring security. Thank you!

[OuchilisticBlogspot]

I'm just at the beginning but I really feel like this video is underrated, your explanations are really clear and DAMN COMPLETE, you actually explain, you go into the details, your voice and tone make if really easy to follow and are nice to the hears, this is the first time I start a tutorial about Spring Security without wanting to drop everything after 5 minutes. THANK YOU!

[doljae]

If someone studying spring security alone has a problem, I would highly recommend taking this lecture twice.
It was great not only to implement it but to explain the necessary principles together.

I am not an English speaker, but your pronunciation and accent were so easy to understand.
I hope you will teach you the Spring techniques you use in the field in this video style.

Additionally, if possible, I hope to add automatic English subtitles to the video.

Thanks!

[salih.k]

Watched the whole 5 hours, I enjoyed every minute of it. Thank you Nelson, I appreciate it.
Love from Istanbul / Turkey

[subhrajeetmitra]

This is the best spring security course in the internet right now.

[rkyshnan]

Thank you Nelson. This was very helpful. With Spring security changing every now and then I wanted a one stop tutorial to everything. This served me well. Request - can you do a video on Oauth with Spring security please?

[francksgenlecroyant]

This is the best spring security course! This guy Nelson (Amigoscode) teaches with all his heart, will and mind! I am happy for having you buddy! May God bless you much more Nelson!

[LeonardoPachon]

I'd like to say: Thanks for your effort! Your classes are amazing!

[AbhishekKumar-tcbz]

Hey Thanks a lot man, this is by far the best tutorial of spring security online.
I struggled a lot configuring security on my project watching other videos as they were not complete or precise, your video has everything.
Thanks a lot once again.
Best Wishes.

[mohamadsharifi]

By far this is the best spring security video I've watched on youtube. Thank you for making such a great tutorial

[nirbanrouth]

Hi i am from India . Learning from your tutorials is very easy. The way you are breaking the topics is just wow. one question how do you understand the technology, what are the steps you follow, do you jump directly in documentation. How to understand documentation properly ? what should be the steps. Thanks for your tutorials, keep inspiring us.

[himhimlo]

Amigo's courses are the best java courses I have ever seen. Thanks you very much. They are always clean and up-to-date. However, since I am not native english speaker, may you pls add back caption in the video so that other people like me can easier to follow what you are talking about?