In Chapter 1, Anatomy of an Unsafe Application, and Chapter 2, Getting Started with Spring Security, we used the Spring IO BOM to assist in dependency management, but the rest of the code in the projects was using the core Spring Framework and required manual configuration. Starting with this chapter, we will be using Spring Boot for the rest of the applications, to simplify the application configuration process. The Spring Security configuration we will be creating will be the same for both a Spring Boot and non-Boot application. We will cover more details on Spring IO and Spring Boot in the Appendix, Additional Reference Material.
Since this chapter is about integrating Spring Security with custom users and APIs, we will start with a quick introduction to the domain model within the JBCP calendar application.
