Download PDF by Mick Knutson: Spring Security - Third Edition

Key Features

• Architect ideas that leverage the entire strength of Spring safety whereas closing loosely coupled.
• Implement numerous eventualities comparable to assisting present consumer shops, person register, authentication, and assisting AJAX requests,
• Integrate with well known Microservice and Cloud prone similar to Zookeeper, Eureka, and Consul, in addition to complex ideas, together with OAuth, JSON internet Token's (JWS), Hashing, and encryption algorithms

Book Description

Knowing that skilled hackers are itching to check your talents makes protection probably the most tricky and high-pressured issues of making an software. The complexity of safely securing an program is compounded in case you should also combine this issue with current code, new applied sciences, and different frameworks. Use this publication to simply safe your Java software with the attempted and depended on Spring safety framework, a strong and hugely customizable authentication and access-control framework.

The booklet begins by way of integrating numerous authentication mechanisms. It then demonstrates the way to correctly limit entry on your program. It additionally covers tips about integrating with a few of the extra well known internet frameworks. An instance of the way Spring safety defends opposed to consultation fixation, strikes into concurrency keep watch over, and the way you could make the most of consultation administration for administrative capabilities can be included.

It concludes with complicated safeguard eventualities for RESTful webservices and microservices, detailing the problems surrounding stateless authentication, and demonstrates a concise, step by step method of fixing these matters. And, by way of the tip of the ebook, readers can relaxation guaranteed that integrating model 4.2 of Spring safety may be a continuing pastime from begin to finish.

What you are going to learn

• Understand universal protection vulnerabilities and the way to unravel them
• Learn to accomplish preliminary penetration checking out to discover universal safeguard vulnerabilities
• Implement authentication and authorization
• Learn to make use of current company infrastructure equivalent to LDAP, energetic listing, Kerberos, CAS, OpenID, and OAuth
• Integrate with well known frameworks comparable to Spring, Spring-Boot, Spring-Data, JSF, Vaaden, jQuery, and AngularJS.
• Gain deep realizing of the safety demanding situations with RESTful webservices and microservice architectures
• Integrate Spring with different protection infrastructure parts like LDAP, Apache listing server and SAML