Securing your Spring apps with modern Spring Security

Laurentiu Spilca - Endava

Confused and worried about all the new and old ways of using Spring Security? Come and clarify your concerns before introducing vulnerabilities in your Spring apps. The workshop will include all the relevant details on major changes starting with Spring Security 6. We’ll work on both old and new configuration fashions with an accent on the new ones and how to upgrade. The focus will be mostly on the configurations you mostly need in real-world apps.

Agenda

The workshop will include all the relevant details on major changes starting with Spring Security 6. We’ll work on both old and new configuration fashions with an accent on the new ones and how to upgrade. The focus will be mostly on the configurations you mostly need in real-world apps.

1. Spring Security authentication & authorization class design (before and after Spring Security 6)
2. Credentials management
3. Implementing authorization at the endpoint and method level
4. Configuring CSRF & CORS
5. OAuth 2/OpenID Connect in practice
6. Implementing an OAuth 2/OpenID Connect authorization server (part 1)
7. Implementing an OAuth 2/OpenID Connect authorization server (part 2)
8. Implementing a resource server
9. Testing security configurations