Security

Spring Boot: just 4 beans for implementing a default JDBC Authentication with SecurityFilterChain-based Configuration
|

Spring Boot: just 4 beans for implementing a default JDBC Authentication with SecurityFilterChain-based Configuration

This project is a pure REST API demo, exposing just a couple of protected endpoints. It is based on Java version 17, and the latest releases of Spring Boot 3.2.1 (announced on DECEMBER 19, 2023) and Spring Security 6.2.1 (announced on DECEMBER 21, 2023). It shows the 4 very basic beans required for the default JDBC-based Authentication for implementing a fundamental custom security configuration class based on the SecurityFilterChain. You can use it as a base repo for further customizations.

Spring Boot Security Configuration, practically explained – Part4: Custom Authentication Provider for password verification via a stored procedure
| | |

Spring Boot Security Configuration, practically explained – Part4: Custom Authentication Provider for password verification via a stored procedure

This is the 4th in a series of posts which focuses on how we can create and use a CustomAutenticationProvider and use it with a password verification stored procedure.

Spring Boot Security Configuration, practically explained – Part3: LDAP Bind Authentication
|

Spring Boot Security Configuration, practically explained – Part3: LDAP Bind Authentication

This is the 3rd in a series of posts which focuses on LDAP Authentication, but does not provide any detail on the LDAP itself. Our aim is to demonstrate how you can implement LDAP Authentication with Spring Boot framework, by using either a configurer (via the the ldapAuthentication()) or an authentication provider Bean (the LdapAuthenticationProvider) in a classic Custom Security Configuration class, extending
the WebSecurityConfigurerAdapter

Spring Boot Security Configuration, practically explained – Part1: Starting with Spring Boot Security and Basic HTTP Authentication
|

Spring Boot Security Configuration, practically explained – Part1: Starting with Spring Boot Security and Basic HTTP Authentication

The legacy Spring Boot Security Configuration, extending the WebSecurityConfigurerAdapter abstract class, is considered deprecated and is being replaced by a component-based security configuration. However, since the existing coding base is huge, here, we will stick to customization of the WebSecurityConfigurerAdapter, and we will try to provide a better understanding, using practical examples.