Information Technology

VMware Spring Security

Instructor-Led 11 Agenda

Description

This 2-day course offers hands-on experience with the major features of Spring Security, which includes configuration, authentication, authorization, password handling, testing, protecting against security threats, and the OAuth2 support to secure applications. On completion, participants will have a foundation for securing enterprise and microservices applications.

Course Overview

Course Objective

By the end of the course, you should be able to meet the following objectives: Use Spring Security in Spring and Spring Boot applications Configure the Spring Security filter chain Protect HTTP endpoints with expression-based access control and the AuthorizationManager API Protect method execution Use different authentication mechanisms Handle passwords in an efficient way Integrate Spring Security with Junit 5 and MockMVC to test HTTP and method security Protect against common vulnerabilities and threats Understand what OAuth2 is Use and configure the Spring Authorization Server Implement a resource server and client

Who Should Attend

Application developers who want to increase their understanding of Spring Security with hands-on experience and build secure Spring and Spring Boot applications.

Security Introduction Lesson Id 1

Security Introduction

Spring Security Basics Lesson Id 2

Spring Security Basics

Customizing Authentication Lesson Id 3

Customizing Authentication

Securing Web Applications Lesson Id 4

Securing Web Applications

Method Security Lesson Id 5

Method Security

Security Testing Lesson Id 6

Security Testing

Handling Passwords Lesson Id 7

Handling Passwords

(Optional) Protecting Against Common Vulnerabilities Lesson Id 8

(Optional) Protecting Against Common Vulnerabilities

OAuth2 and OIDC Concepts Lesson Id 9

OAuth2 and OIDC Concepts

Spring Authorization Server Lesson Id 10

Spring Authorization Server

Protecting and accessing resources with OAuth2 Lesson Id 11

Protecting and accessing resources with OAuth2

Lesson Id	Title	Description
1	Security Introduction	Need for security<br />Basic security concepts<br />Common security vulnerabilities
2	Spring Security Basics	Introduction to Spring Security<br />High-level architecture<br />Overview of SecurityContext<br />Spring Security with Spring Boot
3	Customizing Authentication	Building blocks for authentication<br />Authentication mechanisms based on user name and password<br />Other authentication mechanisms<br />Authentication events
4	Securing Web Applications	Configuring authorization<br />Using AccessDecisionsManager for authorization<br />Using AuthorizationManager for authorization<br />Bypassing security
5	Method Security	Method security architecture<br />Declarative method security with annotations
6	Security Testing	Spring Security Testing Support<br />Security mock annotations and meta-annotations<br />Using MockMvc to test security
7	Handling Passwords	Password hashing<br />Upgrading passwords
8	(Optional) Protecting Against Common Vulnerabilities	Hardening web applications with security headers<br />Preventing cross-site request forgery<br />Encrypting data in transit
9	OAuth2 and OIDC Concepts	Need for OAuth<br />Overview of OAuth2 and OIDC<br />OAuth2 grant types<br />Types of tokens<br />Spring Security OAuth2 support and OAuth2 login
10	Spring Authorization Server	Introduction to Authorization Server<br />Spring Authorization Server endpoints<br />Spring Authorization Server configuration
11	Protecting and accessing resources with OAuth2	Resource server<br />Using JWT tokens<br />Using opaque tokens<br />Configuring an OAuth2 client