BestHub
Sign in
Tagged articles

Spring Security

223 articles · Page 2 of 3
政采云技术
政采云技术
Mar 21, 2023 · Information Security

Deep Dive into Spring Security Authentication Process and Core Components

This article provides a comprehensive analysis of Spring Security's authentication mechanism, detailing the filter chain, core components such as SecurityContextHolder, AuthenticationManager, ProviderManager, and AuthenticationProvider, and illustrating the step‑by‑step flow of username‑password verification with extensive code examples.

AuthenticationAuthenticationManagerJava
0 likes · 18 min read
Deep Dive into Spring Security Authentication Process and Core Components
政采云技术
政采云技术
Mar 21, 2023 · Information Security

In‑Depth Analysis of Spring Security Authentication Process and Core Components

This article provides a comprehensive walkthrough of Spring Security’s authentication mechanism, detailing the filter chain, core security components, and the underlying source‑code flow—from UsernamePasswordAuthenticationFilter through AuthenticationManager, ProviderManager, and DaoAuthenticationProvider—illustrated with code examples and diagrams.

AuthenticationAuthorizationBackend
0 likes · 20 min read
In‑Depth Analysis of Spring Security Authentication Process and Core Components
Java High-Performance Architecture
Java High-Performance Architecture
Jan 29, 2023 · Information Security

Master Spring Security: From Quick Start to Advanced JWT Authentication and RBAC

This comprehensive guide walks you through Spring Security fundamentals, setting up a Spring Boot project, configuring authentication with JWT and Redis, implementing RBAC permission management, customizing error handling, enabling CORS, and addressing CSRF, providing complete code examples and detailed explanations for secure backend development.

AuthenticationAuthorizationJWT
0 likes · 45 min read
Master Spring Security: From Quick Start to Advanced JWT Authentication and RBAC
Shepherd Advanced Notes
Shepherd Advanced Notes
Jan 12, 2023 · Information Security

How to Secure Backend APIs with Spring Security

This tutorial explains why backend API permission checks are essential in RBAC‑based systems, walks through configuring Spring Security for authentication and authorization, demonstrates URL‑level and annotation‑based access control, and discusses token‑driven role verification and caching strategies.

AuthorizationBackend SecurityCaching
0 likes · 14 min read
How to Secure Backend APIs with Spring Security
Java High-Performance Architecture
Java High-Performance Architecture
Dec 24, 2022 · Information Security

Master OAuth2 SSO with Spring Security and JWT: A Complete Step‑by‑Step Guide

This tutorial walks through building a single sign‑on (SSO) solution using OAuth2, Spring Security, and JWT in a Java Spring Boot backend, covering preparation, Maven dependencies, server and client configurations, custom login pages, token handling, logout strategies, project structure, and a full demo with source code.

JWTJavaOAuth2
0 likes · 25 min read
Master OAuth2 SSO with Spring Security and JWT: A Complete Step‑by‑Step Guide
Java High-Performance Architecture
Java High-Performance Architecture
Nov 23, 2022 · Information Security

Master Spring Security with JWT: Build a Secure Java Backend

This tutorial walks through setting up Spring Security with JWT in a Spring Boot project, covering environment configuration, Maven dependencies, custom authentication handlers, permission evaluation, JWT filtering, and testing, providing complete code examples and explanations for building a robust backend authentication system.

AuthenticationAuthorizationJWT
0 likes · 22 min read
Master Spring Security with JWT: Build a Secure Java Backend
Architect
Architect
Nov 19, 2022 · Information Security

Understanding SSO and OAuth2.0: Concepts, Differences, and Implementation

This article explains the principles of Single Sign-On (SSO) and OAuth2.0, compares their concepts, outlines typical SSO workflows using CAS, details OAuth2.0 authorization code flow, clarifies terminology differences, and discusses related security frameworks such as Spring Security and Shiro.

AuthenticationOAuth2.0SSO
0 likes · 9 min read
Understanding SSO and OAuth2.0: Concepts, Differences, and Implementation
Architect's Guide
Architect's Guide
Nov 2, 2022 · Information Security

RBAC Permission Analysis and Spring Security Implementation with JWT and JSON Login

This article explains RBAC concepts and model classifications, demonstrates basic Spring Security setup, shows how to configure in‑memory and database authentication, integrates JWT for stateless token‑based access, implements JSON‑based login, and covers password encryption with BCrypt in a Spring Boot backend.

Access ControlAuthenticationJWT
0 likes · 15 min read
RBAC Permission Analysis and Spring Security Implementation with JWT and JSON Login
Selected Java Interview Questions
Selected Java Interview Questions
Oct 29, 2022 · Information Security

Comprehensive Guide to Spring Security: Setup, Authentication, Authorization, and Advanced Configurations

This article provides a detailed tutorial on Spring Security, covering its core concepts, project setup, authentication flow, custom user details service, password encoding, login handling, role-based access control, CSRF protection, and integration with Thymeleaf, complete with code examples.

AuthenticationAuthorizationBackend
0 likes · 14 min read
Comprehensive Guide to Spring Security: Setup, Authentication, Authorization, and Advanced Configurations
Java Architect Essentials
Java Architect Essentials
Oct 20, 2022 · Information Security

RBAC Permission Analysis and Spring Security Implementation with JWT and JSON Login

This article explains the fundamentals of Role‑Based Access Control (RBAC), its model variants, permission concepts, and user‑group usage, then demonstrates practical Spring Security setups including basic configuration, JWT integration, JSON‑based login, password encryption, and database authentication with complete code examples.

JSON LoginJWTPassword Encryption
0 likes · 17 min read
RBAC Permission Analysis and Spring Security Implementation with JWT and JSON Login
Java Architect Essentials
Java Architect Essentials
Oct 8, 2022 · Backend Development

Spring Boot Security Permission Management Tutorial with Role and Menu Implementation

This article provides a step‑by‑step guide to building a Spring Boot permission management system using Spring Security, Spring Data JPA, Thymeleaf and Bootstrap, covering database design, entity classes, Maven setup, security configuration, dynamic menu loading, front‑end rendering and testing with full source code examples.

Permission ManagementSpring BootSpring Security
0 likes · 19 min read
Spring Boot Security Permission Management Tutorial with Role and Menu Implementation
IT Architects Alliance
IT Architects Alliance
Oct 7, 2022 · Information Security

Mastering RBAC and JWT with Spring Security: A Step‑by‑Step Guide

This comprehensive tutorial explains RBAC concepts, model classifications, and permission handling, then walks through implementing Spring Security with in‑memory authentication, JWT integration, custom JSON login filters, password encryption, and database‑backed authentication, providing complete code examples and configuration details.

AuthenticationAuthorizationJWT
0 likes · 18 min read
Mastering RBAC and JWT with Spring Security: A Step‑by‑Step Guide
Top Architect
Top Architect
Oct 6, 2022 · Information Security

RBAC Permission Analysis and Spring Security Implementation Guide

This article provides a comprehensive tutorial on role‑based access control (RBAC) concepts, model classifications, permission definitions, user‑group usage, and step‑by‑step implementations of Spring Security, JWT integration, JSON login, password encryption, and database authentication with extensive code examples.

Access ControlAuthenticationJWT
0 likes · 18 min read
RBAC Permission Analysis and Spring Security Implementation Guide
Top Architect
Top Architect
Sep 30, 2022 · Backend Development

Implementing JWT Blacklist with RedisTokenStore in Spring Security OAuth2

This article explains why JWT is not ideal for logout and token renewal, recommends using a Redis‑backed token store, and provides three Redis‑based blacklist implementations with detailed Java code snippets for extending JwtTokenStore, custom converters, and global filters in Spring Security OAuth2.

JWTJavaOAuth2
0 likes · 12 min read
Implementing JWT Blacklist with RedisTokenStore in Spring Security OAuth2
Java High-Performance Architecture
Java High-Performance Architecture
Sep 26, 2022 · Information Security

Master Spring Security: From Basics to Advanced Customizations

This comprehensive guide walks you through Spring Security fundamentals, authentication flow, project setup, custom user details, password encoding, login handling, 403 error pages, remember‑me functionality, method security annotations, and CSRF protection, providing clear code examples for each topic.

AuthenticationAuthorizationCSRF
0 likes · 16 min read
Master Spring Security: From Basics to Advanced Customizations
Top Architect
Top Architect
Sep 25, 2022 · Backend Development

Design and Implementation of a Unified Authentication Center Using Spring Security OAuth2

This article provides a step‑by‑step tutorial on building a unified authentication center with Spring Security OAuth2, covering project module planning, authorization and resource server configuration, client module setup, gateway integration, and custom security components, complete with Maven dependencies and Java code examples.

AuthenticationJavaOAuth2
0 likes · 15 min read
Design and Implementation of a Unified Authentication Center Using Spring Security OAuth2
Spring Full-Stack Practical Cases
Spring Full-Stack Practical Cases
Sep 19, 2022 · Information Security

Master Spring Security: Web Expression Auth & Advanced @PreAuthorize Techniques

This guide demonstrates how to implement Spring Security authentication and authorization using web expression-based rules, custom beans, path variables, multi‑condition expressions, and advanced @PreAuthorize methods, including parameter‑based checks, custom annotations, and custom logic services within a Spring Boot 2.4 application.

AuthorizationSpring BootSpring Security
0 likes · 5 min read
Master Spring Security: Web Expression Auth & Advanced @PreAuthorize Techniques
Code Ape Tech Column
Code Ape Tech Column
Sep 14, 2022 · Information Security

Understanding BCrypt and Password Hashing in Spring Security

This article explains the differences between hashing and encryption, demonstrates Java's built‑in hash implementations, discusses the insecurity of MD5 and rainbow‑table attacks, and provides a detailed guide on using BCrypt with Spring Security, including code examples and the PasswordEncoder interface.

Spring Securitybcryptencryption
0 likes · 12 min read
Understanding BCrypt and Password Hashing in Spring Security
Programmer DD
Programmer DD
Sep 13, 2022 · Information Security

Master Spring Security: From Basics to Advanced Customizations

This guide walks through Spring Security fundamentals, including its core authentication and authorization mechanisms, project setup with Maven, customizing usernames, implementing UserDetailsService, creating custom PasswordEncoders, configuring login handling, role and authority checks, CSRF protection, remember‑me functionality, and using security annotations.

AuthenticationAuthorizationCSRF
0 likes · 17 min read
Master Spring Security: From Basics to Advanced Customizations
Code Ape Tech Column
Code Ape Tech Column
Sep 6, 2022 · Information Security

Customizing Spring Security FormLogin Authentication

This tutorial demonstrates how to set up a Spring Security FormLogin authentication flow, including creating a demo project, customizing the login page, configuring security rules, defining users and roles, and testing the login process with custom success and failure handlers.

AuthenticationJavaSpring Boot
0 likes · 11 min read
Customizing Spring Security FormLogin Authentication
Spring Full-Stack Practical Cases
Spring Full-Stack Practical Cases
Sep 5, 2022 · Information Security

How to Implement Database‑Backed Authentication in Spring Security

This guide walks through configuring Spring Security with a custom AuthenticationProvider that authenticates users against a database, covering environment setup, core filter mechanics, custom UserDetails, UserDetailsService, PasswordEncoder implementations, and bean configuration with full code examples.

Custom AuthenticationProviderDatabase AuthenticationJava
0 likes · 12 min read
How to Implement Database‑Backed Authentication in Spring Security
Java High-Performance Architecture
Java High-Performance Architecture
Aug 24, 2022 · Information Security

Mastering RBAC and Spring Security: From Basics to JWT Integration

This article provides a comprehensive guide to Role‑Based Access Control (RBAC) concepts, model classifications, and permission management, then walks through practical Spring Security setups—including basic usage, in‑memory authentication, JWT integration, JSON‑based login, password encryption, and database‑backed authentication, complete with code snippets and diagrams.

AuthenticationJWTJava
0 likes · 21 min read
Mastering RBAC and Spring Security: From Basics to JWT Integration
Spring Full-Stack Practical Cases
Spring Full-Stack Practical Cases
Aug 24, 2022 · Information Security

Mastering Custom Exception Handling in Spring Security (Spring Boot 2.4)

This guide explains how Spring Security processes authentication and authorization failures, walks through the default exception flow, and demonstrates multiple ways to customize error handling—including custom failure handlers, access‑denied pages, and JSON responses—using Spring Boot 2.4.12.

AuthenticationAuthorizationSpring Boot
0 likes · 12 min read
Mastering Custom Exception Handling in Spring Security (Spring Boot 2.4)
Top Architect
Top Architect
Aug 22, 2022 · Information Security

RBAC and Spring Security Tutorial: From Basic Role-Based Access Control to JWT Integration and JSON Login

This article provides a comprehensive guide on implementing role‑based access control (RBAC) with Spring Security, covering RBAC models, password encryption, in‑memory authentication, JWT integration, custom authentication filters for JSON login, and detailed configuration examples with full source code snippets.

AuthenticationJWTJava
0 likes · 16 min read
RBAC and Spring Security Tutorial: From Basic Role-Based Access Control to JWT Integration and JSON Login
Java Captain
Java Captain
Aug 21, 2022 · Information Security

RBAC Permission Analysis and Spring Security Integration with JWT and JSON Login

This article explains RBAC concepts and model classifications, demonstrates role‑based permission management, and provides step‑by‑step guides for using Spring Security with simple authentication, JWT token generation, JSON‑based login, password encryption, and database‑backed user authentication in Java applications.

AuthenticationJWTJava
0 likes · 15 min read
RBAC Permission Analysis and Spring Security Integration with JWT and JSON Login
Java Architect Essentials
Java Architect Essentials
Jul 20, 2022 · Information Security

Spring Security Based System Permission Management Tutorial

This article provides a comprehensive step‑by‑step guide on building a permission management system with Spring Security, covering database design, entity classes, Maven configuration, security configuration, dynamic menu loading, front‑end rendering using Thymeleaf, and complete testing with sample code and screenshots.

AuthenticationAuthorizationPermission Management
0 likes · 19 min read
Spring Security Based System Permission Management Tutorial
Code Ape Tech Column
Code Ape Tech Column
Jul 5, 2022 · Information Security

Understanding and Implementing HttpBasic Authentication in Spring Security

This article explains the classic HttpBasic authentication mode in Spring Security, its limited use cases, how to integrate it with a Spring Boot project by adding Maven dependencies and configuration code, and details the underlying Base64‑based mechanism with step‑by‑step illustrations.

AuthenticationBackendHttpBasic
0 likes · 6 min read
Understanding and Implementing HttpBasic Authentication in Spring Security
Code Ape Tech Column
Code Ape Tech Column
Jun 20, 2022 · Backend Development

Customizing the Token Response Format in Spring Security OAuth2

This article explains how to override Spring Security OAuth2's default /oauth/token endpoint to return a unified response structure by redefining the TokenEndpoint and optionally the CheckTokenEndpoint, providing complete Java code examples and implementation details.

JavaOAuth2Spring Security
0 likes · 6 min read
Customizing the Token Response Format in Spring Security OAuth2
Programmer DD
Programmer DD
Jun 14, 2022 · Backend Development

Integrating Enterprise WeChat QR Login with Spring Security OAuth2

This guide walks through configuring Enterprise WeChat QR code authentication in a Spring Security OAuth2 application, covering environment setup, application registration, custom OAuth2 request handling, token exchange, user‑info retrieval, and final authentication handling while highlighting common pitfalls and required code snippets.

Enterprise WeChatJavaOAuth2
0 likes · 9 min read
Integrating Enterprise WeChat QR Login with Spring Security OAuth2
Java Architecture Diary
Java Architecture Diary
Jun 13, 2022 · Information Security

Step-by-Step Guide to OAuth2 Token Generation and Authentication Flow

This article walks through the complete OAuth2 token generation process, covering gateway pre‑processing, client authentication, request handling, authentication object assembly, password validation, token creation, storage options, and response handling with code examples and diagrams.

AuthenticationBackendSpring Security
0 likes · 5 min read
Step-by-Step Guide to OAuth2 Token Generation and Authentication Flow
Programmer DD
Programmer DD
Jun 3, 2022 · Backend Development

Spring Security OAuth EOL: Migrate to Spring Security 5.7 & Authorization Server

Spring Security OAuth has reached end‑of‑life, with its documentation removed and code moved to a read‑only Spring attic repository; this guide explains how to detect deprecated dependencies, replace them with Spring Security 5.7’s OAuth2 Client, Resource Server, and the new Spring Authorization Server, ensuring a smooth migration to modern, supported authentication solutions.

BackendJavaOAuth2
0 likes · 7 min read
Spring Security OAuth EOL: Migrate to Spring Security 5.7 & Authorization Server
macrozheng
macrozheng
May 30, 2022 · Information Security

Master Spring Security 5.7: Configure Without WebSecurityConfigurerAdapter

This guide walks you through upgrading to Spring Boot 2.7.0 and Spring Security 5.7.1, showing the deprecated WebSecurityConfigurerAdapter removal, the new SecurityFilterChain approach, and advanced dynamic permission techniques with complete code examples.

JavaSpring BootSpring Security
0 likes · 13 min read
Master Spring Security 5.7: Configure Without WebSecurityConfigurerAdapter
Programmer DD
Programmer DD
May 18, 2022 · Backend Development

How to Isolate Session and JWT Users in Spring Security: Strategies and Pitfalls

This article explains how to separate backend admin users using stateful Session authentication from front‑end app users using stateless JWT in a Spring Security‑based system, covering path‑interception strategies, session key isolation, custom UserDetailsService implementations, and complete configuration examples for an Id Server authorization server.

JavaPath InterceptionSession vs JWT
0 likes · 10 min read
How to Isolate Session and JWT Users in Spring Security: Strategies and Pitfalls
Programmer DD
Programmer DD
May 15, 2022 · Information Security

Secure Spring Cloud Microservices with the New Spring Authorization Server

This article explains how to replace the deprecated Spring Security OAuth2 with a modern Spring Authorization Server solution, detailing the authentication flow, required components, configuration examples for Spring Cloud Gateway, Resource Server, and Id Server, and provides step‑by‑step demo instructions.

OAuth2Spring Cloud GatewaySpring Security
0 likes · 9 min read
Secure Spring Cloud Microservices with the New Spring Authorization Server
IT Architects Alliance
IT Architects Alliance
Apr 22, 2022 · Information Security

Implementing Single Sign-On with Spring Security and JWT – A Comprehensive Guide

This article provides a detailed, step‑by‑step tutorial on building a Spring Security‑based Single Sign‑On solution using JWT, covering SSO concepts, JWT structure, RSA encryption, custom authentication filters, Maven project setup, configuration files, and full code examples for both authentication and resource services.

AuthenticationJWTJava
0 likes · 22 min read
Implementing Single Sign-On with Spring Security and JWT – A Comprehensive Guide
Top Architect
Top Architect
Apr 21, 2022 · Information Security

Implementing Single Sign-On with Spring Security and JWT

This article provides a comprehensive 20,000‑word guide on building a Spring Security‑based single sign‑on solution using JWT, covering the SSO concept, token structure, RSA encryption, Maven project setup, configuration files, custom authentication and verification filters, and end‑to‑end testing with Postman.

AuthenticationJWTJava
0 likes · 23 min read
Implementing Single Sign-On with Spring Security and JWT
Architecture Digest
Architecture Digest
Mar 30, 2022 · Backend Development

Implementing a Custom Annotation for Anonymous Access in Spring Security

This article explains how to create a custom @IgnoreAuth annotation and integrate it with Spring Security to automatically whitelist controller methods, comparing the two standard ways of permitting requests—configure(WebSecurity) for static resources and configure(HttpSecurity) for filter‑chain‑aware endpoints—while providing full source code examples.

Custom AnnotationJavaSpring Security
0 likes · 8 min read
Implementing a Custom Annotation for Anonymous Access in Spring Security
Programmer DD
Programmer DD
Mar 29, 2022 · Information Security

Mastering OAuth2 Client Authentication: From client_secret_jwt to TLS Methods

This article explains the classification of OAuth2 clients, details multiple authentication methods—including client_secret_jwt, private_key_jwt, TLS‑based approaches—and provides code examples and best‑practice recommendations for securely authenticating clients in modern OAuth2 deployments.

OAuth2Spring SecurityTLS
0 likes · 5 min read
Mastering OAuth2 Client Authentication: From client_secret_jwt to TLS Methods
Programmer DD
Programmer DD
Mar 16, 2022 · Backend Development

How to Use a Custom Annotation for Anonymous Access in Spring Security

This article explains two Spring Security configuration approaches, introduces a custom @IgnoreAuth annotation, and shows how to automatically whitelist annotated endpoints by scanning RequestMappingHandlerMapping, complete with code examples and workflow details.

Anonymous AccessCustom AnnotationJava
0 likes · 10 min read
How to Use a Custom Annotation for Anonymous Access in Spring Security
Programmer DD
Programmer DD
Feb 22, 2022 · Information Security

How Does Spring Security Manage Built‑In Filter Order? A Deep Dive

This article explains how Spring Security’s HttpSecurity class maintains the order of its built‑in filters using FilterOrderRegistration, demonstrates the registration and retrieval logic with code examples, and clarifies how duplicate orders are resolved during filter sorting.

BackendFilter OrderHttpSecurity
0 likes · 8 min read
How Does Spring Security Manage Built‑In Filter Order? A Deep Dive
Top Architect
Top Architect
Jan 18, 2022 · Information Security

Comprehensive Spring Security Guide: Authentication, Authorization, Custom Configurations, and CSRF Protection

This article provides an in‑depth tutorial on Spring Security, covering its core concepts, authentication flow, project setup, dependency imports, custom UserDetailsService, password encoding, login handling, role‑based access control, CSRF protection, and integration with Thymeleaf, complete with practical code examples.

AuthenticationAuthorizationCSRF
0 likes · 16 min read
Comprehensive Spring Security Guide: Authentication, Authorization, Custom Configurations, and CSRF Protection
Code Ape Tech Column
Code Ape Tech Column
Dec 9, 2021 · Information Security

Customizing Exception Responses in Spring Security OAuth2

This article explains how to customize authentication and resource server exception messages in Spring Security OAuth2, covering the creation of custom translators, entry points, and filters, with step‑by‑step code examples and testing procedures for handling username/password errors, grant type errors, client credential errors, token expiration, and insufficient permissions.

AuthenticationBackendJava
0 likes · 10 min read
Customizing Exception Responses in Spring Security OAuth2
Code Ape Tech Column
Code Ape Tech Column
Dec 6, 2021 · Information Security

Integrating OAuth2.0 with JWT in Spring Security – Advanced Tutorial

This article explains how to integrate OAuth2.0 with JWT token issuance in Spring Security, covering transparent vs opaque tokens, server‑side configuration, resource‑server validation, testing with Postman, and key source‑code snippets for a complete end‑to‑end authentication solution.

AuthenticationBackendJWT
0 likes · 9 min read
Integrating OAuth2.0 with JWT in Spring Security – Advanced Tutorial
Code Ape Tech Column
Code Ape Tech Column
Dec 2, 2021 · Information Security

Comprehensive Guide to OAuth2.0: Principles, Four Grant Types, and Implementation with Spring Security

This article explains why OAuth2.0 is needed, clarifies the differences between tokens and passwords, describes the OAuth2.0 protocol and its four grant types, and provides a step‑by‑step Spring Boot + Spring Cloud Alibaba implementation of an authorization server and a resource server with full code examples.

AuthenticationAuthorizationSpring Boot
0 likes · 22 min read
Comprehensive Guide to OAuth2.0: Principles, Four Grant Types, and Implementation with Spring Security
Code Ape Tech Column
Code Ape Tech Column
Nov 29, 2021 · Information Security

Implementing JWT-Based Authentication and Authorization with Spring Security in a Frontend‑Backend Separated Architecture

This article explains how to use Spring Security together with JWT to build a stateless authentication system for front‑end/back‑end separated applications, covering token issuance, refresh logic, custom filters, handlers, UserDetailsService implementation, global security configuration, and testing procedures.

AuthenticationAuthorizationBackend
0 likes · 12 min read
Implementing JWT-Based Authentication and Authorization with Spring Security in a Frontend‑Backend Separated Architecture
Programmer DD
Programmer DD
Nov 24, 2021 · Information Security

Shiro vs Spring Security: Which Java Security Framework Fits Your Project?

This article compares Apache Shiro and Spring Security, outlining their core concepts, execution flows, key features, and practical guidance to help developers choose the most suitable Java security framework based on project requirements and team expertise.

AuthenticationAuthorizationJava Security
0 likes · 5 min read
Shiro vs Spring Security: Which Java Security Framework Fits Your Project?
Programmer DD
Programmer DD
Nov 22, 2021 · Backend Development

Mastering Dynamic Permissions in Spring Security 5.6 with SpEL

This article explains how Spring Security 5.6 simplifies dynamic permission control using annotation, SpEL‑based beans, and the new AuthorizationManager API, providing step‑by‑step code examples and configuration tips for developers seeking flexible, low‑overhead security solutions.

AuthorizationManagerDynamic PermissionsJava
0 likes · 5 min read
Mastering Dynamic Permissions in Spring Security 5.6 with SpEL
Programmer DD
Programmer DD
Nov 14, 2021 · Information Security

Deep Dive into Spring Authorization Server: Configuring OAuth2 Filters

This article explains the modular configuration of Spring Security's OAuth2 components, showcases the core config classes for client, resource, and authorization servers, and details the default filter chain and customizable filter configurers used by Spring Authorization Server.

Backend SecurityJavaOAuth2
0 likes · 7 min read
Deep Dive into Spring Authorization Server: Configuring OAuth2 Filters
Programmer DD
Programmer DD
Oct 30, 2021 · Backend Development

How to Transform a Monolith into a Spring Cloud OAuth2 Resource Server

This tutorial walks through converting a monolithic Spring application into a Spring Cloud microservice by implementing a JWT‑based OAuth2 resource server, covering required dependencies, custom JWT decoding, key separation, security filter configuration, and token parsing customization.

JWTOAuth2Spring Cloud
0 likes · 10 min read
How to Transform a Monolith into a Spring Cloud OAuth2 Resource Server
Programmer DD
Programmer DD
Oct 29, 2021 · Information Security

Why You Need an OAuth2 Resource Server for Microservice Security

This article explains what an OAuth2 Resource Server is, why traditional monolithic security models become cumbersome in microservice architectures, and how decoupling authentication from authorization using JWTs simplifies token validation across distributed services.

OAuth2Spring Securityresource-server
0 likes · 5 min read
Why You Need an OAuth2 Resource Server for Microservice Security
Programmer DD
Programmer DD
Oct 25, 2021 · Information Security

How to Implement Single Sign‑On with Spring Security and JWT in 30 Minutes

This tutorial walks through the concepts of Single Sign‑On (SSO) and JSON Web Tokens (JWT), then provides a complete Spring Security integration with JWT—including project structure, RSA key handling, utility classes, custom authentication and verification filters, and step‑by‑step testing using Postman.

JWTJavaSSO
0 likes · 19 min read
How to Implement Single Sign‑On with Spring Security and JWT in 30 Minutes
GrowingIO Tech Team
GrowingIO Tech Team
Sep 16, 2021 · Information Security

How GrowingIO Unified OAuth2, LDAP, and CAS for Seamless SSO Integration

GrowingIO’s server-side solution integrates three distinct authentication protocols—OAuth2, LDAP, and CAS—into a unified SSO flow, detailing each protocol’s process, the overall architecture, role of the IAM and Gateway components, and providing configuration and code examples for implementation.

AuthenticationCASLDAP
0 likes · 12 min read
How GrowingIO Unified OAuth2, LDAP, and CAS for Seamless SSO Integration
Programmer DD
Programmer DD
Aug 20, 2021 · Information Security

Keycloak + Spring Security: Unpacking the Filter Chain

This article examines how Keycloak integrates with Spring Security in a Spring Boot application, detailing the custom security filters added to the standard chain, the handling of authentication and authorization for the /admin/foo endpoint, and practical steps to enable detailed logging for deeper insight.

AuthenticationJavaKeycloak
0 likes · 8 min read
Keycloak + Spring Security: Unpacking the Filter Chain
Programmer DD
Programmer DD
Aug 19, 2021 · Backend Development

Integrate WeChat OAuth2 with Spring Security for Secure Web Apps

This guide walks through setting up WeChat web authorization, customizing Spring Security's OAuth2 flow, handling token exchange, and retrieving user info, providing a complete backend solution for secure WeChat-enabled applications.

JavaOAuth2Spring Boot
0 likes · 16 min read
Integrate WeChat OAuth2 with Spring Security for Secure Web Apps
Programmer DD
Programmer DD
Aug 7, 2021 · Information Security

Essential Keycloak Adapter Settings for Spring Security Integration

This article outlines the most commonly used Keycloak adapter configuration properties for Spring Security integration, explaining each setting such as realm, resource, auth-server-url, SSL requirements, CORS, bearer-only mode, and client credentials, and provides guidance on when and how to apply them.

AdapterAuthenticationAuthorization
0 likes · 6 min read
Essential Keycloak Adapter Settings for Spring Security Integration
Programmer DD
Programmer DD
Aug 7, 2021 · Information Security

How to Seamlessly Integrate Keycloak with Spring Security in Spring Boot

This tutorial explains step‑by‑step how to add Keycloak authentication to a Spring Boot application using the Spring Security adapter, covering Maven dependencies, configuration files, custom resolvers, role mapping, session strategies, and the typical authorization code flow.

AuthenticationJavaKeycloak
0 likes · 10 min read
How to Seamlessly Integrate Keycloak with Spring Security in Spring Boot
Programmer DD
Programmer DD
Jul 8, 2021 · Information Security

Keycloak Explained: Powerful Open‑Source SSO Solution, Pros & Cons

Keycloak, Red Hat’s open‑source identity and access management platform, offers a comprehensive SSO solution with extensive protocols, admin UI, Spring Security integration, and customizable features, but its complexity and steep learning curve may pose challenges for smaller projects.

AuthenticationAuthorizationKeycloak
0 likes · 7 min read
Keycloak Explained: Powerful Open‑Source SSO Solution, Pros & Cons
Programmer DD
Programmer DD
Jul 6, 2021 · Backend Development

Unified Multi-Channel Login with Spring Security: Password, SMS, and Mini‑App

This article demonstrates how to implement a unified authentication system in Spring Security that supports traditional username/password login, SMS-based captcha login, and WeChat Mini‑Program login, detailing the required components, custom filters, provider configurations, and code examples for a production‑ready solution.

AuthenticationCAPTCHAJava
0 likes · 14 min read
Unified Multi-Channel Login with Spring Security: Password, SMS, and Mini‑App
Top Architect
Top Architect
Jun 15, 2021 · Information Security

Securing Spring Boot Applications with JWT and Spring Security

This tutorial explains how to protect a Spring Boot web application by integrating Spring Security and JSON Web Tokens (JWT), covering project setup, dependency configuration, custom authentication components, security filters, token generation, role‑based access control, and testing with curl commands.

AuthenticationJWTJava
0 likes · 15 min read
Securing Spring Boot Applications with JWT and Spring Security
Programmer DD
Programmer DD
Apr 20, 2021 · Information Security

What’s the Real Difference Between WebSecurity and HttpSecurity in Spring Security?

This article explains the core roles of HttpSecurity and WebSecurity in Spring Security, how they build and manage SecurityFilterChain objects, the purpose of FilterChainProxy, and why WebSecurity serves as the framework’s external entry point while HttpSecurity defines internal security policies.

HttpSecuritySecurityFilterChainSpring Security
0 likes · 6 min read
What’s the Real Difference Between WebSecurity and HttpSecurity in Spring Security?
Top Architect
Top Architect
Mar 31, 2021 · Information Security

Comparison of Apache Shiro and Spring Security: Features, Execution Flow, and Choosing the Right Framework

This article compares Apache Shiro and Spring Security, outlining each framework's features, execution flow, and strengths, and provides guidance on when to choose Shiro for lightweight, framework-agnostic projects versus Spring Security for deeper Spring integration and broader community support.

AuthenticationAuthorizationJava
0 likes · 5 min read
Comparison of Apache Shiro and Spring Security: Features, Execution Flow, and Choosing the Right Framework
Huawei Cloud Developer Alliance
Huawei Cloud Developer Alliance
Mar 23, 2021 · Backend Development

From Student to Java MVP: Insights from Huawei Cloud’s Top Engineer

In this exclusive interview, Huawei Cloud MVP Jiangnan Yidiayu shares his journey from a management student to a Java development expert, offering career advice, discussing the evolution of Java in the cloud‑native era, and revealing the motivations behind his popular Spring Security book and upcoming tutorials.

JavaSpring Securityinterview
0 likes · 13 min read
From Student to Java MVP: Insights from Huawei Cloud’s Top Engineer
21CTO
21CTO
Mar 9, 2021 · Backend Development

Mastering OAuth2 SSO with Spring Security and JWT: A Step‑by‑Step Guide

This tutorial walks through building a single sign‑on (SSO) system using OAuth2, Spring Security, and JWT, covering preparation, core concepts, Maven dependencies, configuration files, custom login pages, client setup, logout handling, project structure, and a full demonstration.

AuthenticationBackendJWT
0 likes · 25 min read
Mastering OAuth2 SSO with Spring Security and JWT: A Step‑by‑Step Guide
Programmer DD
Programmer DD
Feb 23, 2021 · Backend Development

Master Spring Security OAuth2: How OAuth2AuthorizationCodeAuthenticationProvider Retrieves Tokens

This article explains the role of OAuth2AuthorizationCodeAuthenticationProvider in Spring Security, details how OAuth2AccessTokenResponseClient obtains access tokens, shows how to customize the token endpoint, and walks through the complete token‑retrieval flow with code examples and step‑by‑step analysis.

AuthenticationAuthorization Code GrantJava
0 likes · 6 min read
Master Spring Security OAuth2: How OAuth2AuthorizationCodeAuthenticationProvider Retrieves Tokens
Code Ape Tech Column
Code Ape Tech Column
Jan 26, 2021 · Backend Development

Step‑by‑Step Guide to Building SSO with JWT and Spring Security

This tutorial explains the concept of Single Sign‑On, demonstrates a simple ticket‑based analogy, introduces JWT structure and RSA signing, and walks through a complete Spring Boot implementation—including project layout, Maven dependencies, configuration files, utility classes, custom authentication and verification filters, security configuration, and Postman testing—so readers can build a secure SSO service from scratch.

AuthenticationAuthorizationJWT
0 likes · 25 min read
Step‑by‑Step Guide to Building SSO with JWT and Spring Security
Programmer DD
Programmer DD
Dec 16, 2020 · Information Security

Spring Security OAuth2 Callback Authentication Explained: Managers & Providers

This article explores how Spring Security processes OAuth2 login callbacks, detailing the role of AuthenticationManager, the creation of OAuth2LoginAuthenticationToken, the selection of appropriate AuthenticationProvider such as OAuth2LoginAuthenticationProvider and OidcAuthorizationCodeAuthenticationProvider, and the subsequent generation of OAuth2User and token objects.

AuthenticationJavaOAuth2
0 likes · 4 min read
Spring Security OAuth2 Callback Authentication Explained: Managers & Providers
Top Architect
Top Architect
Oct 15, 2020 · Information Security

Spring Security Guide: Authentication, Authorization, and Web Security

This comprehensive Spring Security guide explains core concepts of authentication and access control, details the AuthenticationManager and ProviderManager interfaces, shows how to customize authentication managers, configure authorization with AccessDecisionManager, secure web requests with filter chains, and apply method-level security, including asynchronous contexts.

AuthenticationAuthorizationJava
0 likes · 23 min read
Spring Security Guide: Authentication, Authorization, and Web Security
macrozheng
macrozheng
Oct 14, 2020 · Information Security

How Mall’s Permission Management Works: Spring Security & OAuth2 Explained

This article answers common questions about permission management in the Mall and Mall‑Swarm projects, covering deprecated tables, required SQL scripts, front‑end menu visibility, differences between Spring Security and OAuth2‑Gateway implementations, configuration fixes, token usage, and a tiny demo project for learning.

OAuth2Permission ManagementSpring Security
0 likes · 8 min read
How Mall’s Permission Management Works: Spring Security & OAuth2 Explained
Programmer DD
Programmer DD
Jul 28, 2020 · Information Security

Step‑by‑Step Guide to Implement SMS Captcha Login with Spring Security

This tutorial walks you through building a complete SMS‑based captcha authentication flow in Spring Security, covering cache lifecycle, service implementation, custom authentication token, provider, filter, and configuration, and shows how to integrate it without affecting existing login methods.

SMS captchaSpring BootSpring Security
0 likes · 19 min read
Step‑by‑Step Guide to Implement SMS Captcha Login with Spring Security
Java Architecture Diary
Java Architecture Diary
May 7, 2020 · Backend Development

How to Customize OAuth 2.0 Token Endpoint in Spring Security

Learn how to retrieve OAuth 2.0 tokens using the password grant, customize the default token endpoint with Spring Security OAuth2, and understand the underlying source code that maps the new endpoint, complete with practical curl commands and Java configuration examples.

JavaOAuth2Spring Security
0 likes · 4 min read
How to Customize OAuth 2.0 Token Endpoint in Spring Security
Java Architecture Diary
Java Architecture Diary
Apr 29, 2020 · Backend Development

Enforcing Single-Device Login with Spring Security OAuth2

This article explains how to modify Spring Security OAuth2's token service to enforce a single-device login by customizing token creation and key generation logic, removing existing tokens for the same user and ignoring client identifiers, with code examples and deployment steps.

JavaOAuth2Spring Security
0 likes · 5 min read
Enforcing Single-Device Login with Spring Security OAuth2
Architecture Digest
Architecture Digest
Apr 28, 2020 · Information Security

Understanding Spring Security Integration with Servlet Applications

This article explains how Spring Security integrates with Servlet‑based Java web applications by detailing the servlet filter chain, DelegatingFilterProxy, FilterChainProxy, SecurityFilterChain, and providing code examples to help readers grasp authentication and authorization mechanisms.

AuthenticationFilter ChainJava
0 likes · 7 min read
Understanding Spring Security Integration with Servlet Applications
Java Architecture Diary
Java Architecture Diary
Apr 20, 2020 · Backend Development

How to Customize OAuth2 Tokens with Business Data in Spring Security

This article explains how to extend the default OAuth2 token response by embedding business-related fields such as tenant_id, user_id, and username, and walks through the underlying Spring Security code—including the password grant flow, token creation, and enhancement process—illustrated with code snippets and diagrams.

AuthenticationOAuth2Spring Security
0 likes · 5 min read
How to Customize OAuth2 Tokens with Business Data in Spring Security
Java Architecture Diary
Java Architecture Diary
Apr 7, 2020 · Information Security

Why OAuth2 Tokens Miss expires_in and How Spring Security Handles It

The article examines why the demo environment of pig4cloud returns an OAuth2 access token without the expires_in field, contrasts it with a local deployment, analyzes the Spring Security OAuth2 token generation code, and explains that according to the OAuth2 specification the expires_in parameter should be returned even for permanently valid tokens.

Access TokenOAuth2Spring Security
0 likes · 4 min read
Why OAuth2 Tokens Miss expires_in and How Spring Security Handles It
Senior Brother's Insights
Senior Brother's Insights
Mar 24, 2020 · Backend Development

Secure Swagger UI in Spring Boot with Spring Security – A Step‑by‑Step Guide

This tutorial shows how to integrate Spring Security into a Spring Boot project that already uses Swagger2, configuring dependencies, application properties, Swagger and security classes so that the generated API documentation is protected by a login page without affecting other business endpoints.

API documentationAccess ControlSpring Boot
0 likes · 7 min read
Secure Swagger UI in Spring Boot with Spring Security – A Step‑by‑Step Guide
Architecture Digest
Architecture Digest
Dec 29, 2019 · Information Security

Spring Security Guide: Authentication, Authorization, and Customizing Filter Chains

This guide introduces Spring Security fundamentals, explaining authentication and authorization concepts, the core interfaces such as AuthenticationManager and AccessDecisionManager, how to configure them with Spring Boot, customize filter chains, apply method‑level security, and handle thread‑bound security contexts for asynchronous processing.

AuthenticationAuthorizationJava
0 likes · 18 min read
Spring Security Guide: Authentication, Authorization, and Customizing Filter Chains
Programmer DD
Programmer DD
Dec 19, 2019 · Information Security

Master Role-Based Access Control with Spring Security: Practical Guide

This article explains how to implement role‑based access control in Spring Security by embedding roles into UserDetails, configuring HttpSecurity with hasRole/hasAnyRole/hasAuthority, handling anonymous users, and using permitAll, providing code examples and detailed explanations for each approach.

AuthorizationBackend SecurityJava
0 likes · 7 min read
Master Role-Based Access Control with Spring Security: Practical Guide
Programmer DD
Programmer DD
Dec 17, 2019 · Information Security

Understanding RBAC: Role‑Based Access Control Models for Secure Spring Applications

This article explains why Role‑Based Access Control (RBAC) is essential for modern applications, outlines the four RBAC model variants (RBAC0‑RBAC3), clarifies core concepts such as users, roles, sessions and permissions, and shows how RBAC improves scalability and security in Spring Security projects.

Access ControlRBACSecurity Architecture
0 likes · 9 min read
Understanding RBAC: Role‑Based Access Control Models for Secure Spring Applications
Programmer DD
Programmer DD
Dec 7, 2019 · Information Security

Master Spring Security Exception Handling: From Authentication to Access Denied

This article explains the different exception types in Spring Security, how HTTP status codes map to authentication and authorization failures, and provides concrete implementations of AuthenticationEntryPoint and AccessDeniedHandler that return JSON responses, along with configuration tips for integrating them into a Spring Boot application.

AuthorizationJavaSpring Security
0 likes · 8 min read
Master Spring Security Exception Handling: From Authentication to Access Denied
Programmer DD
Programmer DD
Dec 3, 2019 · Information Security

Mastering Spring Security Logout: Custom Handlers and Configurations

This article walks through the inner workings of Spring Security after login, explains session and token based authentication, and provides step‑by‑step guidance on customizing logout logic with LogoutFilter, LogoutConfigurer, and custom LogoutHandler and LogoutSuccessHandler implementations in Java.

Custom HandlerJavaSpring Security
0 likes · 8 min read
Mastering Spring Security Logout: Custom Handlers and Configurations
Programmer DD
Programmer DD
Nov 24, 2019 · Backend Development

Master Custom Spring Security Configuration in Spring Boot

This article walks through customizing Spring Security in a Spring Boot application by creating a custom security configuration class, overriding authentication manager, web security, and HttpSecurity methods, and explains the default and common HttpSecurity settings with code examples.

JavaSpring BootSpring Security
0 likes · 6 min read
Master Custom Spring Security Configuration in Spring Boot