Book Overview & Buying
Table Of Contents
Feedback & Rating

Hands-On Spring Security 5 for Reactive Applications

By : John

3 (2)

Buy this Book

Hands-On Spring Security 5 for Reactive Applications

3 (2)

By: John

Buy this Book

Overview of this book

Spring Security enables developers to seamlessly integrate authorization, authentication, and a range of security features for complex enterprise applications. This book provides a hands-on approach to developing reactive applications using Spring and will help you get up and running in no time. Complete with step-by-step explanations, practical examples, and self-assessment questions, the book begins by explaining the essential concepts of reactive programming, Spring Framework, and Spring Security. You’ll then learn about a variety of authentication mechanisms and how to integrate them easily with a Spring MVC application. You’ll also understand how to achieve authorization in a Spring WebFlux application using Spring Security. Furthermore, the book will take you through the configuration required to implement OAuth2 for securing REST APIs, and guide you in integrating security in microservices and serverless applications. Finally, you’ll be able to augment add-ons that will enhance any Spring Security module. By the end of the book, you’ll be equipped to integrate Spring Security into your Java enterprise applications proficiently.

Preface

Who this book is for

What this book covers

To get the most out of this book

Get in touch

Free Chapter

Overview of Spring 5 and Spring Security 5

How examples are structured

New-generation application requirements

Reactive programming

Reactive applications

Spring Framework

Reactive Landscape in Java

Spring Framework and reactive applications

Application security

Spring Security

Spring Security's core features

Spring Security 5's new features

Working of Spring Security

Core Spring Security modules

Summary

Deep Diving into Spring Security

Authentication

Sample application

Authorization

Other Spring Security capabilities

Summary

Authentication Using SAML, LDAP, and OAuth/OIDC

Security Assertion Markup Language

Lightweight Directory Access Protocol

OAuth2 and OpenID Connect

Summary

Authentication Using CAS and JAAS

CAS

Java Authentication and Authorization Service

Kerberos

Custom AuthenticationEntryPoint

PasswordEncoder

Custom filters

Summary

Integrating with Spring WebFlux

Spring MVC versus WebFlux

Reactive support in Spring 5

Spring WebFlux

Spring WebFlux authentication architecture

Spring WebFlux authorization

Sample project

Customization

Summary

REST API Security

Important concepts

Modern application architecture

Reactive REST API

Simple REST API security

Advanced REST API security

Spring Security OAuth project

OAuth2 and Spring WebFlux

Spring Boot and OAuth2

Sample project

Summary

Spring Security Add-Ons

Remember-me authentication

Session management

CSRF

CSP

Channel security

CORS Support

The Crypto module

Secret management

HTTP Data Integrity Validator

Custom DSL

Summary

Other Books You May Enjoy

Leave a review - let other readers know what you think

Customer Reviews

3 (2)

5 star

50%

4 star

3 star

2 star

1 star

50%

PasswordEncoder

Before Spring Security 5, the framework allowed only one PasswordEncoder throughout the application and also had weak password encoders such as MD5 and SHA. These encoders also didn't have dynamic salt, rather it had more static salt which had to be supplied. With Spring Security 5, there have been huge changes in this area and with the new version, the password encoding concept employs delegation and allows multiple password encoding within the same application. The password which has been encoded has a identifier prefixed to indicate what algorithm has been used (see the following example):

{bcrypt}$2y$10$zsUaFDpkjg01.JVipZhtFeOHpC2/LCH3yx6aNJpTNDOA8zDqhzgR6

This approach enables multiple encoding as needed within the application to be employed. If no identifier is mentioned, this means it uses the default encoder, which is StandardPasswordEncoder.

...