Spring Boot Security Basics

Authentication, URL matching, OAuth 2.0 and more...

Channel
----------------------------------
Complex concepts explained in short & simple manner. Topics include Java Concurrency, Spring Boot, Microservices, Distributed Systems etc. Feel free to ask any doubts in the comments. Also happy to take requests for new videos.

New video added every weekend.

Popular Videos
----------------------------------

[DefogTech]

Sorry about rushing through the topics, there was lot to cover. Spring Security is a dense subject. I recommend pausing at every feature and trying to implement it. Let me know if you want me to cover any topic in-depth.

I am also creating a hands-on coding video with same slides. Will try to publish it soon.

[ILuvBilli]

OMG, In 14 mins u have covered every topic of spring security in a simple manner. Hats off to u

[yifeifeng]

Timeline
0:00 Create a new Spring Boot project (via Initializr)
0:20 Create a sample controller
0:41 Spring Security's default log-in feature
2:17 Customize user and password (via property file)
2:40 Get authenticated user (2 ways)
3:43 In-Memory users
5:39 JDBC users
6:56 Customize Login Page
8:36 OAuth 2.0 Google Client (via property file)
9:43 REST API Authentication (Postman + Basic Auth)
12:23 URL based security
13:24 Authorization
14:24 Lot more

[pannamodi]

Hi Buddy...you just nailed the java. I have gone through many of ur videos . All are awesome. Please make video on JMS with Spring. Also on AWS.

[SushilYadav]

I’m watching almost all of your videos. I learn something from every video even if I think I know about it. Please keep creating more videos. Thanks.

[dkypa]

So far the best channel with full stuff and no fluff

[masum.v]

In 14min video you just covered everything.. It's awesome man!! Thanks.. 😁😁😁

[raushansingh]

This was the one I was looking for. Thanks buddy, you made my day

[palaniappanrm]

My first comment on youtube. Have watched all your videos. Just a few to go. This video is by far the best video I have ever seen.

[vengateshm]

Thank You. Nice introduction on security.

[mostinho]

2:50 can get the Principal object (the authenticated user) with the request

4:00 in memory authentication using WebSecurityConfigurerAdapter and implementing the configure method that takes an AuthenticationManagerBuilder. There are other configure methods in the WebSecirityConfigurerAdapter that don’t take an AuthenticationManagerBuilder, but take HttpSecurity for example.

WebSecurityConfigurerAdapter is usually an inner class inside a WebMvcConfigurer class, but can also be its own class
WebMvcConfigurer has methods you can override, such as customizing the ViewControllerRegister and adding a custom login page to it

By default, you need to have a password encoder or else spring throws an exception. You can turn it off by putting a
5:04 prefix {noop} to the pass to tell spring don’t use password encoder (use the noop password encoder). This is for in-memory authentication only.

5:45 jdbcauthentication, needs a DataSource object, can also disable password encoding by doing
to have two tables in your db schema: users table and authorities table
Having a schema.sql file makes spring run the sql statements against the db on startup to create the tables

7:20 WebSecurityConfigurerAdapter configure method that takes HttpSecurity object. Can use the HttpSecurity to set the custom login page (along with addViewController function from WebMvcConfigurer)

9:00 oauth

9:50 rest api authentication
Depending on the Accept header from the client, sprint can either send a 401 unauthorized or redirect the client to a login page with 302

[SomjitNag]

This was the one I was waiting for !! Finally! Thank you! And given how dense and difficult spring security is, you did a marvelous job in making things so clear! Those who will complain that the video is rushed, haven't tried learning spring security by themselves! 😄 Compared to that headache, this is an absolute pleasure to go through!

[sumitbasu]

Really great video this is..Could you please make two separate videos with hands on coding 1)OAuth 2.0 and 2)JWT.

[rajkumarsowna]

Awesome dude. Very well explained. Voice and presentation are very clear.

[JavaLovers]

Thanks, please have more videos open ID connect + OAuth 2 where the final response of OAuth 2 would have Id token additionally so that in that case first request goes to openid for authentication and then jwt token would be generated along with user info and then same OAuth 2 will interpret it and return token then

[veerapareddydushyanth]

Thank u so much
It was so nice to get a notification on every Sunday.... We r learning great 👍.
Kudos to u

[vinaykumar-zqei]

It is short but very informative video, Thanks :)

[SomjitNag]

Also, a suggestion, it would be great if you could collaborate with someone for angular/react (if not yourself) and show the full frontend to backend security/authorization flow. Especially role based auth, parts of which you touched at the very end of the video

[TheLeony]

Great video, thank you! Waiting for more Spring videos😎

[TripathiPiyush]

Thank u so much.... Please make another videos for Authorization through AWS signature.