For all the folks asking for Spring Security Architecture Slides here you go... github.com/jgrandja/presentations/blob/master/SpringIO-Barcelona2017-JoeGrandja.pdf
@ramakotiah2 жыл бұрын
Thank you
@jhonatanorz7 жыл бұрын
For those looking for the slides: files.meetup.com/6015342/Spring%20Toronto%20-%20Joe%20Grandja.pdf.
@shashankmanitripathi73357 жыл бұрын
Anyhow it is fine session, but properly displaying the screen would have been a lot more helpful. please update the Slideshare link..
@swaritagarwal58166 жыл бұрын
Use above link
@anmoldeep01235 жыл бұрын
Wonderful talk Mr Joe . Thank you .
@linecode68603 жыл бұрын
Very good explanation and the questions were very helpful to understand more !!
@drizzyDreF7 жыл бұрын
Slides link pls?
@privettoli7 жыл бұрын
Afe dare +
@anaclaraesponda1327 жыл бұрын
+1
@nilesh84816 жыл бұрын
Detail can be found here docs.spring.io/spring-security/site/docs/3.0.x/reference/technical-overview.html
Excellent video. Joe gave a lot of useful information. Thanks a lot for this vidoe.
@madhurgwa7 жыл бұрын
Great session with nice information, but this video needs to be edited where slides should run in any side of the the speaker.
@prasaddixit7 жыл бұрын
This is an excellent presentation. Gives a good understanding of spring security basics. Video has an issue though. Its very difficult to read the slides on the tv as its rendered pretty much white blob on small screen devices (phones). Would you be able to share the slides ?
@user-kq2vg1xo9t4 жыл бұрын
मैं टीवी पर कुछ देख नहीं पाया। पर कार्यशाला अच्छी थी।
@AvinashJ212 жыл бұрын
Not able to read anything from screens
@saikasyapdamerla75507 жыл бұрын
It was really helpful to get high level view on spring security..
@_mvr_5 жыл бұрын
SpringBoot developers seem generally very tired I hope their projects are working fine
@bCool-sl5cy3 жыл бұрын
I awaited you to show us the big picture first: the web-app without security, what's happening when an http request comes in. After that, just by adding the spring-security dependecie the "magic" is security begins. The one important filter that welcomes the request and how the security process involves. I must admit that I have just seen the first 11 minutes.
@vinothkumar17917 жыл бұрын
can I get slides very difficult to see the monitor
@AvinashGA7 жыл бұрын
Excellent presentation. A link to the slides might have added even more excellence for the cause :)
@privettoli7 жыл бұрын
what about 1080p?
@sunilkumarkota68476 жыл бұрын
I learnt a lot today ,because before this I am totally confused about spring security..Thank you..But Slides are difficult to view and no clarity.
@sinamehrad57214 жыл бұрын
How can I download the slides?
@hrvojecrnjak92257 жыл бұрын
Wonderful talk! Too bad slides are not provided
@terrycollins75497 жыл бұрын
Please share the slides
@SarathAnnareddy7 жыл бұрын
neat talk. thanks a bunch.
@paulmimicry91473 жыл бұрын
I cant see the presentation :(
@aakoss7 жыл бұрын
Are there slides available to go with this? Slideshare perhaps?
@davidafsilva7 жыл бұрын
Properly displaying the screen would have been a lot more helpful. At least here, on youtube. Oh well..
@liamzhang61266 жыл бұрын
Only after the video I understand how Spring Security works. However I still don't understand how Spring Security remembers the Authenticated User. Because after the request is done SecurityContextHolder clears the Authentication from the ThreadLocal. So what happens on next request from user? How SecurityContext know that the request come from the same user?
@pauldibenedetto67116 жыл бұрын
Great question!
@liamzhang61266 жыл бұрын
I found an answer in the Spring Security Reference documentation at 9.4.4 Storing the SecurityContext between requests. Depending on the type of application, there may need to be a strategy in place to store the security context between user operations. In a typical web application, a user logs in once and is subsequently identified by their session Id. The server caches the principal information for the duration session. In Spring Security, the responsibility for storing the SecurityContext between requests falls to the SecurityContextPersistenceFilter, which by default stores the context as an HttpSession attribute between HTTP requests. It restores the context to the SecurityContextHolder for each request and, crucially, clears the SecurityContextHolder when the request completes. You shouldn’t interact directly with the HttpSession for security purposes. There is simply no justification for doing so - always use the SecurityContextHolder instead.
@rajatagrawal1415 жыл бұрын
where is the link for the github repo
@ihateidiots13164 жыл бұрын
Spring Security definitely sucks because: 1) a very awful design decisions 2) overengineered concepts for simple things, for example http.addHeaderWriter(new DelegatingRequestMatcherHeaderWriter(new AntPathRequestMatcher("/login"), new XFrameOptionsHeaderWriter(new WhiteListedAllowFromStrategy(Arrays.asList("www.facebook.com", "www.google.com"))))) 3) expressions in annotations like @AuthenticationPrincipal(expression = "@jpaEntityManager.merge(#this)") 4) SecurityContext.getInstance() static method to retrieve security context while using DI-container at the same time 5) SecurityContextHolder sucks 6) horrible code
@morvenhuang14997 жыл бұрын
the monitor behind him is so fuzzy, cannot see nothing.
@GuilhermeCesarMedeiros5 жыл бұрын
Please put the subtitles, these automatically generated are not good.
@nemoduff13716 жыл бұрын
Please share the slides!
@anubhavgoel79226 жыл бұрын
plz share the slides link
@kpt20487 жыл бұрын
slides please
@alexeystaroverov48045 жыл бұрын
Sad. It's spoiled by bad video... Like tons of others spoiled by bad some...