Spring Security Fundamentals - Lesson 3 - Custom authentication

In this stream, we discuss Spring Security using the latest available version in 2022. We'll discuss configurations for authentication and authorization, tips and tricks, how to learn Spring Security, vulnerabilities, OAuth 2, and many more.

[jahongiratametov]

This man is the best teacher I have ever met. Good luck!

[nikitaalekseev]

Definitely the Best Spring-Security course in the whole You-Tube!

[zanpirate]

Great content, as always. Thank you a lot for taking the time to redo the whole series, it helps immensly.

[rezokobaidze]

One of the best spring security tutorials thanks a lot!

[hamzaazeem]

Thank you for the awesome tutorial and in-depth explaining! Great efforts <3

[ismaildogukancokluk]

Man you are a legend. The absolute gem of a course that is. Hope the best for you.

[gianluigidemarco]

hello laurl! I'm new to the spring framework. I knew that spring is based on convention over configuration, but it's not easy to find these conventions in the documentation as well.
what you do is supportive for all the community.
thanks

[urrahman]

new ways of spring security auth implementation - 16:52

[alexanderivanchenko]

Hi! Thank you for this lesson.
Can you please include in one of the upcoming lectures a brief overview on how HttpSecurity works under the hood?
From the documentation, I understood that it's a configuration object which intern delegates to a bunch of specialized configuration objects, and it also implements the Builder pattern.
But I still don't feel like I have a firm understanding of what happening behind the scenes.

Thanks

[ram]

Hi Laur Spilca Sir, thank you for the awesome lessons! I just wanted to ask how did you learn all these information? From the official documentation or were you part of the Spring Security team or were you self taught? Please let me know, cheers!

[walerik]

Hi! Thanks for the great lesson. I tried the code and it works with postman calling GET-Methods but with POST it doesn't work. What is the solution for this problem?

[MinhLe-qplo]

Thank you for this video! <3 . And i have a question: is the request will go through all the filter in the filterChain (including custom Filter).
i see you config your own filter locate before so that request will go from customFilter to or it just go from customeFilter to controller ?. I read a document from gg and someone answer that use OnePerRequestFilter that just one filter can processing request, not 2

[jahongiratametov]

Thanks for your hard and great job. By the way, do you have a lesson which is dedticated to Vault?

[Sebastian-zscp]

What do you mean, it goes into the next filter? Are there several filters? Can the next filter be for the admin backend, surely something like /adminDashboard, /adminsettings? 53:34

[jolskey]

Hello Laurentiu,

How can I make my Spring MVC app (with thymeleaf and Spring Security for sure) to redirect to the previous url after the login has completed? I can specify defaultSuccessUrl but it kind of requires a constant url. I've seen this asked on stackoverflow and answers are pretty old. I wonder if there is an easier solution in recent Spring releases.

[vutranang]

Thank you for the very dedicated lesson. When using 'addFilterAt(customAuthenticationFilter, UsernamePasswordAuthenticationFilter.class)', does 'customAuthenticationFilter' replace Or does it work in a similar way to 'addFilterBefore'?

[springlearner]

Hello! Please explain why you have inserted the CustomFilter before UsernameandPaswwordFilter specifically and not another one.

[Sebastian-zscp]

Can we use it to exclude external apps that want to access our backend, or is that not possible?

Either way, the money-making procedures are rarely in the backend anyway! 36:35

[abdellahguennioui]

thanks a lot man, i have some confusions, in the old playlist i see the same explination about Custom authentication (Spring Security - Lesson 5 - The filter chain), but you didn't define your own CustomauthenticationManager and also you didn't define a customAuthentication who implements Authentication interface class, i need also to know why we cast the authentication object in the method authenticate to customAuthentication. thank you

[h.]

Hi, does spring know we use custom authentication because we added a SecurityFilterChain in the context by replacing the so it didn't generate a password for http basic? By the way thank you for blessing us with all this content.