Book Overview & Buying
Table Of Contents
Feedback & Rating

Hands-On Spring Security 5 for Reactive Applications

By : John

3 (2)

Buy this Book

Hands-On Spring Security 5 for Reactive Applications

3 (2)

By: John

Buy this Book

Overview of this book

Spring Security enables developers to seamlessly integrate authorization, authentication, and a range of security features for complex enterprise applications. This book provides a hands-on approach to developing reactive applications using Spring and will help you get up and running in no time. Complete with step-by-step explanations, practical examples, and self-assessment questions, the book begins by explaining the essential concepts of reactive programming, Spring Framework, and Spring Security. You’ll then learn about a variety of authentication mechanisms and how to integrate them easily with a Spring MVC application. You’ll also understand how to achieve authorization in a Spring WebFlux application using Spring Security. Furthermore, the book will take you through the configuration required to implement OAuth2 for securing REST APIs, and guide you in integrating security in microservices and serverless applications. Finally, you’ll be able to augment add-ons that will enhance any Spring Security module. By the end of the book, you’ll be equipped to integrate Spring Security into your Java enterprise applications proficiently.

Preface

Who this book is for

What this book covers

To get the most out of this book

Get in touch

Free Chapter

Overview of Spring 5 and Spring Security 5

How examples are structured

New-generation application requirements

Reactive programming

Reactive applications

Spring Framework

Reactive Landscape in Java

Spring Framework and reactive applications

Application security

Spring Security

Spring Security's core features

Spring Security 5's new features

Working of Spring Security

Core Spring Security modules

Summary

Deep Diving into Spring Security

Authentication

Sample application

Authorization

Other Spring Security capabilities

Summary

Authentication Using SAML, LDAP, and OAuth/OIDC

Security Assertion Markup Language

Lightweight Directory Access Protocol

OAuth2 and OpenID Connect

Summary

Authentication Using CAS and JAAS

CAS

Java Authentication and Authorization Service

Kerberos

Custom AuthenticationEntryPoint

PasswordEncoder

Custom filters

Summary

Integrating with Spring WebFlux

Spring MVC versus WebFlux

Reactive support in Spring 5

Spring WebFlux

Spring WebFlux authentication architecture

Spring WebFlux authorization

Sample project

Customization

Summary

REST API Security

Important concepts

Modern application architecture

Reactive REST API

Simple REST API security

Advanced REST API security

Spring Security OAuth project

OAuth2 and Spring WebFlux

Spring Boot and OAuth2

Sample project

Summary

Spring Security Add-Ons

Remember-me authentication

Session management

CSRF

CSP

Channel security

CORS Support

The Crypto module

Secret management

HTTP Data Integrity Validator

Custom DSL

Summary

Other Books You May Enjoy

Leave a review - let other readers know what you think

Customer Reviews

3 (2)

5 star

50%

4 star

3 star

2 star

1 star

50%

Spring MVC versus WebFlux

Spring WebFlux was brought in as part of Spring 5 to bring in a new alternative to existing Spring MVC. Spring WebFlux brings in non-blocking event loop style programming to provide asynchronicity.

Event loop was brought in and made famous by Node.js. Node.js was able to perform non-blocking operations using single-threaded JavaScript by offloading operations to the system kernel whenever possible. The kernel, being multithreaded, is able to do these offloaded operations and after successful execution notifies Node.js through callbacks. There is a constantly running process that checks the call stack (where operations are stacked which need to be executed) and keeps executing processes in First In, First Out (FIFO) manner. If the call stack is empty, it looks into the Event Queue for operations. It picks them up and then moves them to the call stack...