How to configure Spring Security Authorization - Java Brains

[@Finn-jp6pn]

Please make some videos explaining Design Patterns. You are a really good teacher. I'm sure some of your audience have already made this request.

[@kalamatej]

I really like you approach of theory interlayed with examples and especially how you are at first showing a kind of counterexample and then you correct it. It feels very natural and intuitive 👍

[@AbhinavJha03]

seriously what kind of skills you have , just amazed the way of your explanation crystal clear and in dept knowledge, Thank You so much

[@Genuine7566]

I really liked the way how you skipped the part of how to maintain role, How does server is going to identify which role the client belongs to should it be at a database level or Authorization server . You clearly bypassed it . Please do make a video of that . We are waiting.

[@josuevargas7252]

I love this channel. Best ever java learning source in youtube. Ever.

[@benjamingreen1278]

finally found a lecture to help me understand and successfully build&add to a project. please keep on doing this thank you!!!!!

[@Unconvinient]

I ensure everybody , it is the best explanation of such hard topic , spring security by itself is very hard , listen him , he talk it about like 2 * 2; good work bro.

[@deltamakuba]

Have learned so much from your Spring Security playlist...I know it has deprecated but it has a lot of concepts to learn. Thank you!

[@limitXbreaker]

Your tutorial is really interactive and helpful.

[@grrlgd3835]

very, very professional. extremely lucid. thanks for ALL of your content. top quality

[@nareshe9906]

I fixed my issue facing for quite long time . Thank you.

[@francogb]

Excellent! Thank you. I'd like to see how to configure JWT in Spring Security

[@manna384]

A series of tutorials like this is very helpful. Keep doing the great work.

[@venkateshkotte4620]

I have been following your tutorials, you are just Awesome!!. The way you explain things makes me feel like concepts are as simple as that but these are not simple without your great explanation.

[@sandunpushpika208]

The video was so helpful. Really understood all the things. Thank you very much!!!!

[@MohammadIbrahim-j2k]

00:02 Learn to configure Spring Security authorization 01:53 Enabling different levels of access control for APIs in Spring Security 03:37 Use HTTP Security object to configure access restrictions for paths 05:18 Configuring path to permission mapping using method chaining in Spring Security HTTP security method 07:15 Configuring Spring Security to allow access based on user roles and specify login type 09:11 Configuring access to specific URLs in Spring Security 11:13 Configuring URL access restriction in Spring Security 13:01 Configuring higher privilege admin role.

[@Rompack]

You made me understand, what hours of reading websites didn't can.

[@phanindraitika5609]

Good work !! Thanks for the tutorial.. Hi Others.. when we get ads let's not skip them.. I think it helps the channel..

[@ZIMBYA01]

Big shoutout to you! Kudos.. Nice work man!!

[@brijeshwani101]

Very very nice and step-by-step tutorial. Thank you...

[@divinity5250]

#Salute! The way you explained spring security was an ease❤️

[@manish8067]

Spot on. Exactly what I wanted to understand. I have developed an admin application of an existing application and spring boot project is same for both applications. Just the UI is different. So I need to configure some mappings which should only be accessible by admin. This would help for sure. Thanks a lot.

[@purnimachawla9503]

Brilliant work Kaushik! Thank you so much!

[@mansoorganie5753]

thank u so much, how much u learn us that how much god help u for make ur life easy, bcz some people need guy is like to show, explain and learn , thank u so much sir ......

[@narasimharaop301]

Thank you so much,Doing great sequence of videos for better understanding from basics.

[@rahotmanp5212]

Finally learnt spring security clearly

[@hunylicious9646]

Thank you! Please do a video on How to perform REST API - POST without disabling csrf in security config!

[@piyushgupta417]

Thank you so much for clearing basics.

[@serik3818]

Thank you so much for fabulous lessons

[@lindijin8103]

Brilliant and Thank you so much. Fantastic and easy learning from u

[@nolediganamimadre5714]

Thank so much. How about spring security + micro services + jwt. Please!!!!!!!!!!! Great!!!

[@chukwukaegbujio1450]

Great tutorials. Thanks, your tutorial is super comprehensive

[@SosetaFurioasaJr]

Super tutorial, thanks!

[@hyun231]

Great video! Thanks for sharing :)

[@shazyartaha192]

you are awesome , I wanna thank you for teaching our.

[@daisyhsu3928]

thank you for detailed explanation!! I would like to request for the content about MethodSecurity. Thanks in advances Sir!!

[@cedriccasas4356]

Tes vidéos sont géniales!! Un grand merci!

[@amolkale6252]

Hello Sir,Thanku So much For this video...Thanku so much It's very very helpfull

[@novicegeek-mp188]

Thank you for the simple and wonderful explanation and examples.

[@bluex217]

I wonder is there any reason to use the method chaining approach for restricting endpoints based on role rather than using the "@PreAuthorize" annotation on the controller mapping/method level ?

[@anurag9110]

Great information. Thanks. But I suggest you to demonstrate with postman

[@JP-programming]

great tutorial

[@tejassontakke8382]

Thank you for such an informative video.

[@krige]

How do you configure Spring Security Authorization not based on roles but on the result of a database query having a parameter in the URL? For example when we want to authorize /company/75/employee/26/ only if the employee 26 actually belongs to the company 75

[@ashishshukla9742]

Thanks a lot Kaushik can you please create few videos on Elastic Search ...

[@AminHasan85]

Your videos are very useful.

[@vishalsolankee613]

Thank you so much for clarifying these concepts of Spring Security _/\_

[@tomknud]

Nice vid, thanks.

[@kiyoqsy4901]

i haven't seen the video yet , but i know that's good

[@AhamedKabeer-wn1jb]

Thank you..Well explained..

[@s77funky]

What was the card you were referencing in the beginning for in memory authentication?

[@JuanDanielOrnella]

Thank you!! You are the best!!!

[@demigod6190]

Excellent

[@rdnkmr]

Thank you Kaushik 🙂

[@sumitsharma5829]

Thanks alot

[@MrEvmk]

Notes for my ref : Use /logout for log out Similar to authenication by extending the websecurityconfigadapter having config(Http security) http.authorizerequest().anymatcher("/user").hasanyrole("user") . anymatcher ("/admin).hasanyrole("user","admin") .anymatcher("/").permitall() .and.formlogin();

[@sdmj730]

good explanation

[@yuliaa.4741]

Thank you so much!

[@parthibanthangaraj6988]

@koushks, Why are you naming the class as HomeResource.java instead of HomeController.java?

[@HetHeer]

Well explained

[@avidulam]

simply awesome :)

[@RAJEESHMY]

Hey, is it possible to make another video with the updated features? Now the adapter is deprecated

[@mayanksen3061]

Thanks sir..😊

[@shobhanathsharma2113]

How to include authentication only on specific url in spring security ? So permitAll for all endpoints expect few urls

[@jayyadav__]

Hi kaushik If you have time Please make a more videos on Spring security Outh2 and explain which one is most demanding right now in market . Please make like microservices videos that are awesome.😍😍

[@indurana3256]

Hello, I wanted to ask if mvcMatcher is used in the same way as this antMatcher?

[@raoufmounif]

Thanks for your awsonme tutorial, am watching your video in mars 2023 and the WebSecurityConfigurerAdapter is deprecated am woundring if you would make another videos with the same fantastic content

[@gabrielrogath1520]

Thank you sir

[@guidoferri8683]

Even if this lesson is a bit outdated, it's still useful if paired with the official spring docs

[@jericho7989]

What theme did you used ?

[@michal234486]

In this case would it make a difference if /admin were after /user?

[@nooruddinraotiwala490]

simplified...woow!!!

[@mmirmae8136]

Thanks a lot ! Please make it with JWT and with Angular as front end, my security works in the back but not with Angular !

[@adiinfo01]

Thank you Sir. Please also share tutorials regarding cloud native applications development.

[@worldwide6626]

WebSecurityConfigurerAdapter is depcrecated. Can you please do another one?

[@zxcvbnmasdfghjkl1ful]

Great!

[@daliovic24]

For those who are having a problem with roles from a database, try adding ROLE_ to your users entries roles in the database

[@lovelyjain7839]

Does it work for post request also. For post & delete it didn't worked for me ?

[@odaiahmed3882]

Could you explain about authority and how can I update them ?

[@prajnakarkal4146]

Hi , can we check the same login, logout and user functionality using postman. if yes where the username and password is given ? I think its not a basic auth. kindly suggest.

[@ragnorucca6637]

im not seeing the "cards" pop up when you mention them, is anyone else having the same issue? :/

[@pa1d]

Maybe because they are paid content now

[@adiSuper94]

How would we grant permission to only specific http methods on a url ?

[@kaleemullahnizamani7436]

Complete series on angular integration with spring boot security plz Thanks.

[@АртёмКурилко-н6ч]

Great video, please attach source code for each tutorial it would be priceless

[@d.jangir8]

Hello Kaushik, It worth watching all of your video and thanks for providing such types of content. A Request! Could you please provide us a video(or suggest in the comment) for REST API configured with JWT but with below requirements: 1. User will login "auth/login" and in response get a JWT token with roles, privileges, etc. 2. If user is inactive for sometime let's say 20 minutes then we wanna invalidate the token. 3. if user want to logout "auth/logout" then token for that user should also be invalidated(revoke). If it is possible with STATELESS or STATEFUL spring boot configuration for http security. please suggest.

[@manisharora619]

Thanks a lot. You are doing a wonderful job.Your way of explaining the concept is awesome.I have a question here why the default filter didn't came into picture this time. How does Spring security validate that.

[@akshaygaikwad6470]

After creating configure(HttpSecurity http) spring securities login page is disabled.. After hitting /user it is redirecting to the USER page instead of showing login page..please help

[@MrGarg10may]

Please make a video to explain different login systems, JWT, OAUTH, OAUTH2, key based etc.

[@hugofilipeseleiro]

Thank you !!

[@hariprakash8467]

Thanks Kaushik. I am a scriber of this channel and I watch all of your videos once published. I love them. I feel that with black background and with green font it's a bit not very smooth watch.

[@suvro1089]

Unfortunately when I was logged in as ADMIN and try to access "/user" , instead of showing error it was accessing the user url. why ?

[@ivanetinajero]

Great Video, I have a doubt. What is the difference of hasAnyRole and hasAnyAuthority methods?. Thanks!

[@vaibhavvyavahare]

Hi Sir, want to restrict multiple login user in spring security,kindly help

[@samtawadhawan1188]

Why can't I get the default login page despite adding spring security dependency

[@priyakdey7891]

What is the theme you using ? It is so pleasant for the eyes :)

[@kaji6087]

Did you find out?

[@BALAIT2020]

Sir please take Design patterns classes..Where are we go ,design pattern follows.before i want die ,i hear ur voice with design patterns..thank you,,,🙏🙏🙏

[@danishrockz1]

in the return statement y u r using parentheses??

[@shaznd301]

WebSecurityConfigurerAdapter is not available any more .. i had to do it with making beans

[@MrTpvinh]

how to modify HttpSecurity at runtime ?

[@sanamudash4976]

sir please make video for security in micro services