https://DevOpsCloud.io -- Cloud Monk Losang Jinpa

Return to Manning Spring Series, Spring Security, Java Security, Security, DevOps Security - Security SRE - CI/CD Security, Cloud Native Security - Microservices Security - Serverless Security, DevSecOps, Parallel Programming and Security, Concurrency and Security, Database Security, Data Science Security, Machine Learning Security, Cybersecurity Bibliography, Cybersecurity Courses, Cybersecurity Glossary, Awesome Cybersecurity, Cybersecurity GitHub, Cybersecurity Topics

Fair Use Source: B0977ZG6FZ (SprSecAct 2022)

Spring Security in Action shows you how to prevent cross-site scripting and request forgery attacks before they do damage. You’ll start with the basics, simulating password upgrades and adding multiple types of authorization. As your security skills grow, you'll adapt Spring Security to new Java architectures and create advanced OAuth2 configurations. By the time you're done, you'll have a customized Spring Security configuration that protects against threats both common and extraordinary.

While creating secure applications is critically important, it can also be tedious and time-consuming to stitch together the required collection of security tools. For Java developers, the powerful Spring Security framework makes it easy for you to bake Java security into your software from the very beginning. Filled with Spring Security code samples and practical examples, Spring Security in Action teaches you how to secure your apps from the most common threats, ranging from injection attacks to lackluster monitoring. In it, you'll learn how to manage system users, configure secure endpoints, and use OAuth2 and OpenID Connect for Java authentication and Java authorization.

Security is non-negotiable. You rely on Spring applications to transmit data, verify credentials, and prevent attacks. Adopting “secure by design” principles will protect your network from data theft and unauthorized access / intrusions.

• Encoding passwords and authenticating users
• Securing endpoints
• Automating security testing
• Setting up a standalone authorization server

For experienced Java developers and Spring developers.

PART 1 - FIRST STEPS

• 1 Security Today
• 2 Hello Spring Security

PART 2 - IMPLEMENTATION

• 3 Spring Managing users
• 4 Spring Dealing with passwords
• 5 Spring Implementing authentication
• 6 Hands-on: A small secured web application
• 7 Spring Configuring authorization: Spring Restricting access
• 8 Spring Configuring authorization: Spring Applying restrictions
• 9 Spring Implementing filters
• 10 Applying Spring CSRF protection and Spring CORS
• 11 Spring Hands-on: A Spring separation of responsibilities
• 12 How does Spring OAuth 2 work?
• 13 OAuth 2: Implementing the Spring authorization server
• 14 Java OAuth 2: Implementing the Spring resource server
• 15 OAuth 2: Using Spring JWT and Spring cryptographic signatures
• 16 Spring Global method security: Pre-authorization and Post-authorizations
• 17 Spring Global method security: Pre-filtering and Post-filtering
• 18 Hands-on: An Spring OAuth 2 application
• 19 Spring Security for reactive apps
• 20 Spring Security testing

Lauretiu Spilca is a skilled Java developer and Spring developer and an experienced technology instructor. He is the author of Manning’s Spring Start Here and Spring Security in Action. He is a dedicated development lead and trainer at Endava, with over ten years of Java experience.

• ASIN: B0977ZG6FZ
• ISBN-10: 1617297739 - Fair Use Source: (1617297739 2020)
• ISBN-13: 978-1617297731 - 978-1617297731 on WorldCat.org
• Publisher: Manning (October 1, 2020)
• Publication date: October 1, 2020
• Paperback: 560 pages
• Time to Complete: 14h 52m

Security Research:

• Spring Security in Action on Github
• Spring Security in Action on O'Reilly
• Spring Security in Action on Amazon.com
• Spring Security in Action on DuckDuckGo

• Spring Security in Action on exploit-db.com
• Spring Security in Action on cve.org Database of Common Vulnerabilities and Exposures (CVE)
• Spring Security in Action on threatpost.com
• Spring Security in Action on TalosIntelligence.com

• Spring Security in Action on docs.oracle.com
• Spring Security in Action on JavaSpecialists.eu
• Spring Security in Action on baeldung.com
• Spring Security in Action on KotlinLang.org
• Spring Security in Action on developer.android.com
• Spring Security in Action on xda-developers.com
• Spring Security in Action on Scala-Lang.org
• Spring Security in Action on ClojureDocs.org
• Spring Security in Action on spring.io
• Spring Security in Action on search.maven.org
• Spring Security in Action on MvnRepository.com
• Spring Security in Action on plugins.gradle.org

• Spring Security in Action on javatpoint.com
• Spring Security in Action on w3schools.com
• Spring Security in Action on tutorialspoint.com
• Spring Security in Action on FreeCodeCamp.org
• Spring Security in Action on YouTube

• Spring Security in Action on Reddit
• Spring Security in Action on scholar.google.com
• Spring Security in Action on Stackoverflow
• Spring Security in Action on serverfault.com
• Spring Security in Action on stackexchange.com
• Spring Security in Action on Quora
• Spring Security in Action on Dzone
• Spring Security in Action on Hacker Noon
• Spring Security in Action on TechTarget.com
• Spring Security in Action on InfoQ.com
• Spring Security in Action on Wikipedia.org

Fair Use Sources:

• https://manning.com/books/spring-security-in-action
• Spring Security in Action on DuckDuckGo
• B0977ZG6FZ (SprSecAct 2022)
• https://learning.oreilly.com/library/view/spring-security-in/9781617297731