Nasslahsen Spring Security

Effectively secure your web apps, RESTful services, cloud apps, and microservice architectures
4. Auflage 2024
ISBN: 978-1-83546-011-5
Verlag: De Gruyter
Format: EPUB
Kopierschutz: 0 - No protection

E-Book, Englisch, 596 Seiten

With experienced hackers constantly targeting apps, properly securing them becomes challenging when you integrate this factor with legacy code, new technologies, and other frameworks. Written by a Lead Cloud and Security Architect as well as CISSP, this book helps you easily secure your Java apps with Spring Security, a trusted and highly customizable authentication and access control framework.
The book shows you how to implement different authentication mechanisms and properly restrict access to your app. You'll learn to integrate Spring Security with popular web frameworks like Thymeleaf and Microservice and Cloud services like Zookeeper and Eureka, along with architecting solutions that leverage its full power while staying loosely coupled. You'll also see how Spring Security defends against session fixation, moves into concurrency control, and how you can use session management for administrative functions. This fourth edition aligns with Java 17/21 and Spring Security 6, covering advanced security scenarios for RESTful web services and microservices. This ensures you fully understand the issues surrounding stateless authentication and discover a concise approach to solving those issues.
By the end of this book, you'll be able to integrate Spring Security 6 with GraalVM native images seamlessly, from start to finish.

Autoren/Hrsg.

Nasslahsen, Badr

Fachgebiete

• Mathematik | Informatik EDV | Informatik Technische Informatik Computersicherheit
• Mathematik | Informatik EDV | Informatik Programmierung | Softwareentwicklung Programmier- und Skriptsprachen
• Mathematik | Informatik EDV | Informatik Programmierung | Softwareentwicklung Web Services

Inhaltsverzeichnis

Table of Contents - Anatomy of an Unsafe Application
- Getting Started with Spring Security
- Custom Authentication
- JDBC-based Authentication
- Authentication with Spring Data
- LDAP Directory Services
- Remember-me Services
- Client Certificate Authentication with TLS
- Opening up to OAuth 2
- SAML 2 Support
- Fine-Grained Access Control
- Access Control Lists
- Custom Authorization
- Session Management
- Additional Spring Security Features
- Migration to Spring Security 6
- Microservice Security with OAuth 2 and JSON Web Tokens
- Single Sign-On with the Central Authentication Service

- Build GraalVM Native Images
- Appendix – Additional Reference Material

Über Autor(innen)

Nasslahsen Badr :

Badr Nasslahsen is a lead security and cloud architect with over 17 years of experience. He holds an executive master's degree from Ecole Centrale Paris and an engineering degree from Telecom SudParis. He is an Oracle Certified Java SE 11 Professional, CISSP, TOGAF, CKA, and Scrum Master. Badr has extensive experience with public cloud providers such as AWS, Azure, GCP, Oracle, and IBM. He is also the author of the springdoc-openapi project.