Design and develop Spring applications that are secure right from the start. In
Spring Security in Action, Second Edition you will learn essential security skills including how to:
- Implement and customize authentication and authorization
- Set up all components of an OAuth 2/OpenID Connect system
- Utilize CRSF and CORS configurations
- Secure Spring reactive applications
- Write tests for security configurations
Spring Security in Action, Second Edition is a revised version of the bestselling original, fully updated for Spring Boot 3 and Oauth2/OpenID Connect. This new edition covers the latest patterns for application-level security in Spring apps, demonstrating how Spring Security simplifies every step of the security process. Code samples and useful real-world examples give you hands-on experience of protecting your apps from common threats such as injection attacks and poor monitoring.
About the technology Spring Security is essential for any Java developer looking to master authentication and authorization in Spring apps. By adopting "secure by design" principles with Spring Security's out-of-the-box features, you can protect your apps from data theft and unauthorized intrusions.
About the book Spring Security in Action, Second Edition reveals the Spring Security techniques and tools you need to defend your apps against attack. In this book, author Lauren?iu Spilca, a skilled Java and Spring developer, will teach you how to build your own authorization server, manage system users, configure secure endpoints, and prevent cross-site scripting and request forgery attacks. This new second edition delves into the OAuth 2/OpenID Connect stack and details SecurityFilterChain for security configuration. Don't let security be an afterthought. Start protecting your apps from the first line of code!
About the reader For experienced Java and Spring developers.
About the author Laurentiu Spilca is a skilled Java and Spring developer and an experienced technology instructor. He is also the author of Manning's Spring Start Here and Troubleshooting Java.
設計和開發從一開始就具有安全性的Spring應用程式。
在《Spring Security in Action, Second Edition》中，您將學習到包括以下內容的基本安全技能：
- 實施和自定義身份驗證和授權
- 設置OAuth 2/OpenID Connect系統的所有組件
- 使用CRSF和CORS配置
- 保護Spring反應式應用程式
- 為安全配置撰寫測試
《Spring Security in Action, Second Edition》是暢銷原作的修訂版本，完全更新為Spring Boot 3和Oauth2/OpenID Connect。這本新版涵蓋了Spring應用程式中應用層級安全的最新模式，展示了Spring Security如何簡化安全流程的每一步。代碼示例和有用的實際範例讓您親身體驗如何保護應用程式免受常見威脅，如注入攻擊和監控不足。
關於技術：
Spring Security對於任何希望在Spring應用程式中掌握身份驗證和授權的Java開發人員來說都是必不可少的。通過採用Spring Security的開箱即用功能，遵循“安全設計”原則，您可以保護應用程式免受數據盜竊和未經授權的入侵。
關於本書：
《Spring Security in Action, Second Edition》揭示了保護應用程式免受攻擊所需的Spring Security技術和工具。在這本書中，作者Laurentiu Spilca，一位熟練的Java和Spring開發人員，將教您如何構建自己的授權伺服器、管理系統使用者、配置安全端點，以及防止跨站腳本和請求偽造攻擊。這本新的第二版深入探討了OAuth 2/OpenID Connect堆疊，並詳細介紹了安全配置的SecurityFilterChain。不要將安全性視為事後考慮。從第一行程式碼開始保護您的應用程式！
關於讀者：
適合有經驗的Java和Spring開發人員。
關於作者：
Laurentiu Spilca是一位熟練的Java和Spring開發人員，也是一位經驗豐富的技術講師。他還是Manning出版社的《Spring Start Here》和《Troubleshooting Java》的作者。
