Securing Spring Boot Application | Basic Authentication | Simple Programming

Welcome to Simple Programming

Basic Authentication
Basic authentification is a standard HTTP header with the user and password encoded in base64. This is one of the simplest technique to protect the REST resources because it does not require cookies, session identifiers or any login pages.

@EnableWebSecurity
It allows Spring to find and automatically apply the class to the global WebSecurity.

WebSecurityConfigurer - provides customization to the Websecurity features

Cross-Site Request Forgery (CSRF) is an attack that forces an end user to execute unwanted actions on a web application in which they're currently authenticated

bcrypt is a hashing algorithm

AuthenticationEntryPoint
The main function of this is to allow the framework to send some sort of "to access this resource you must authenticate first" notification from application server to web client

BasicAuthenticationFilter in Spring is the class which is responsible for processing basic authentication credentials presented in HTTP Headers and putting the result into the SecurityContextHolder, and other authentication components use the securityContextHolder to authenticate or authorize accordingly

BasicAuthenticationEntryPoint, LoginUrlAuthenticationEntryPoint, Http403ForbiddenEntryPoint:

In case of basic authentication, the username and password is only encoded with Base64, but not encrypted or hashed in any way

Add another layer of authorization in method level using Roles
@EnableGlobalMethodSecurity(prePostEnabled = true, securedEnabled = true)
@PreAuthorize - SPEL is supported
@Secured - SPEL is not supported

[muks]

Good Start. I would suggest that after every video, Please post the github URL of code that is in the video in description. That will help to identify what is needed. Appreciate your Great efforts.

[trap_music]

Hello Sir, can you please create the Spring Project here with each module included like security, JPA, REST, microservice, thymleaf?

[rajatagrawal]

please provide the link to your github projects