From 0 to Spring Security 4.0

[@ruixue6955]

1:55 what is Spring Security 8:34 Spring demo 11:00 how to code with Spring Security in a Hello World app 11:32 the heart of Spring Security app is the * filter configured in web.xml 13:23 How to configure in case of using Spring Boot 18:28 Custom Login in Form 25:06 custom authentication 26:17 If you are doing username-password based authentication, you will implement interface UserDetailsService 27:24 User model class 28:29 create CustomUserDetails class 35:00 Spring Security and Spring Data integration 39:48 Password Storage 42:12 CSRF Protection 48:21 When to use CSRF 52:04 Security HTTP response headers 01:01:01 Test Support 01:04:54 WebSocket Security

[@maurcioquinonez3350]

ty

[@SpaceL0rd]

WARN: As of Spring Security 4.0,@EnableWebMvcSecurity is deprecated. The replacement is @EnableWebSecurity which will determine adding the Spring MVC features based upon the classpath. To enable Spring Security integration with Spring MVC add the @EnableWebSecurity annotation to your configuration. So springboot people should use the same @EnableWebSecurity

[@robwilk4566]

For those looking for the code on Git it's given at the end. But in case you don't make it that far... github.com/rwinch/spring-security-0-to-4.0

[@nawelsakhraoui9405]

+Rob Wilk thanks a lot you're such an angel =)

[@Cave228MAN]

I am only learning and already have a project with a team of such a newbies like me. So my role is to implement security and this video is treasure!! Thanks )

[@firdousamir_]

Just starting up a new project. The talk really helped. Thanks Rob.

[@gbbsc]

Very well presented and informative. Thanks to the presenter. Also, fwiw, I giggled at his bad jokes.

[@sidsarasvati]

Super informative. Thanks for all the info and best practices

[@nbproduction4150]

Presentation is best but only for professional

[@alfredofaria5403]

Great content! I really appreciate it! Thank you.

[@IgorUrdenko]

This is really good presentation, but is there a chance to get a view on complete code? On GitHub maybe?

[@dimitrisimeros3634]

Hi, very good presentation. It would be useful if you upload the code to a git repository. Thanks in advance.

[@gauravgoyal3732]

I am asking very basic question, but some how my security is not working.. I created class WebSecurityConfigurerAdapter with @Configuration and @EnableWebSecurity annotations.. when i launch my application i should get the default login page by spring... it did not open any thing.. kindly help me on this

[@RuRu-vm6yw]

Would really benefit from a code, but I guess no one has something similar on github I would take a look at? For someone new to Spring, some details are missing out and I am not experienced to find out what !

[@liamzhang6126]

Only after the video I understand how Spring Security works. However I still don't understand how Spring Security remembers the Authenticated User. Because after the request is done SecurityContextHolder clears the Authentication from the ThreadLocal. So what happens on next request from user? How SecurityContext know that the request come from the same user?

[@amitjain561]

HttpSesion used to remember user context in session enabled application. In case of REST API where we don't create session we used to recognize the user by token (Json Web Token commonly used)

[@kpt2048]

please share the slides

[@manuelarturosilvarocha852]

good video. Thanks

[@lolxd3248]

30:02 Exception Driven Development

[@arnold6644]

能不能加个字幕啊。。。。。

[@ganessinv]

I wish you demonstrated hands on code from a developer point of view. this is not so much useful, waste of time.

[@gauravgoyal3732]

I am asking very basic question, but some how my security is not working.. I created class WebSecurityConfigurerAdapter with @Configuration and @EnableWebSecurity annotations.. when i launch my application i should get the default login page by spring... it did not open any thing.. kindly help me on this

[@aprofromuk]

r u using spring boot ? if yes r u using the right starter dependency ? if yes also override the configGlobal method as shown here :)