Tag

Spring Security

Read 24 articles on Spring Security by Ashish Srivastava — practical guides covering implementation patterns, security, and production lessons.

24 posts · page 1 of 2

May 30, 202611 min readBackendFeatured

Implementing Passwordless MFA with FIDO2 and WebAuthn in Spring Boot

Learn how to secure your Spring Boot applications with passwordless authentication using FIDO2 standards and WebAuthn protocols.

May 29, 20268 min readBackendFeatured

Understanding and Implementing CWE-306: Missing Authentication

Learn how to identify and remediate missing authentication flaws in web applications using security scanners and proper Spring Security configurations.

May 28, 20267 min readBackendFeatured

Building a Custom Authentication Provider in Spring Security

Learn how to construct a custom authentication provider in Spring Security to handle specific user validation logic and security requirements.

May 28, 202610 min readSecurityFeatured

Implementing Account Lockout and Brute Force Protection in Spring Security

Learn how to secure your Spring applications against brute force attacks by implementing account lockout strategies, rate limiting, and CAPTCHA integration.

May 27, 20269 min readtechnicalFeatured

Implementing Attribute-Based Access Control (ABAC) with Spring Security

Learn how to build dynamic authorization logic with ABAC, Spring Security, OPA, and Rego policies for fine-grained access control in Java applications.

May 26, 20268 min readTechnicalFeatured

Spring Security OAuth2 Resource Server: Securing APIs

A practical guide to securing APIs using Spring Security OAuth2, covering JWT decoders and token validation strategies.

Part 5 · Spring Security Deep Dive Series

May 26, 20267 min readBackendFeatured

Spring Security Method Security: @PreAuthorize, @Secured, and SpEL

Learn to implement method-level authorization in Spring applications using @PreAuthorize, @Secured, and Spring Expression Language (SpEL) for effective RBAC.

Part 4 · Spring Security Deep Dive Series

May 25, 202610 min readBackendFeatured

Spring Security and GraphQL: Securing GraphQL APIs

Explore essential strategies for securing GraphQL endpoints with Spring Security, including effective authorization patterns and rate limiting techniques.

Part 1 · Secure Backend Architecture Series

May 25, 20269 min readDevelopmentFeatured

Building a Custom UserDetailsService with Spring Security

This guide covers implementing a custom UserDetailsService in Spring Security, focusing on user loading mechanisms and caching strategies for enhanced security.

Part 1 · Machine Identity & DevSecOps Series

May 25, 20269 min readTechnicalFeatured

Spring Security Password Encoding: BCrypt, Argon2, and PBKDF2

Explore the mechanics of BCrypt, Argon2, and PBKDF2 within Spring Security for implementing secure password hashing in modern applications.

Part 15 · Spring Security Deep Dive Series

May 25, 20268 min readSecurityFeatured

Spring Security and OpenTelemetry: Observability for Security Events

Learn to implement distributed tracing and capture security metrics in Spring applications using OpenTelemetry for enhanced observability.

Part 14 · Spring Security Series

May 25, 202611 min readDevelopmentFeatured

Spring Security LDAP Authentication: Enterprise Directory Integration

Learn how to configure Spring Security for LDAP authentication, enabling integration with Active Directory for enterprise user management.

Part 13 · Spring Security Deep Dive Series

May 25, 20268 min readBackendFeatured

Spring Session: Distributed Session Management

Learn how to implement distributed session management with Spring Session and Redis for high-performance applications.

Part 12 · Spring Security Deep Dive Series

May 25, 20269 min readDevelopmentFeatured

Spring Security 6 and Spring Boot 3: Migration Guide

Learn how to migrate your application to Spring Security 6 and Spring Boot 3 with a focus on Jakarta EE compatibility and essential security changes.

Part 11 · Spring Security Deep Dive Series

May 25, 20269 min readBackendFeatured

Spring Security Testing: Unit & Integration Tests

A walkthrough of testing strategies for Spring Security, covering MockMvc assertions, user mocking with @WithMockUser, and OAuth2 integration testing patterns.

Part 10 · Spring Security Deep Dive Series

May 25, 20268 min readBackendFeatured

Spring Security: Filters, Chains & Auth

Explore the internals of Spring Security, focusing on how filters compose the SecurityFilterChain and drive the authentication process.

Part 2 · Spring Security Deep Dive Series

May 25, 20267 min readtechnicalFeatured

Spring Security CORS and CSRF: Proper Configuration for SPAs

Learn how to properly configure Spring Security CORS and CSRF for SPAs, ensuring secure communication between frontend frameworks like Angular and backend services.

Part 9 · Spring Security Deep Dive Series

May 25, 20268 min readDevelopmentFeatured

Spring Security with JWT: Complete Authentication Implementation

Learn how to build an authentication system using Spring Security and JWT, including filter chains, refresh token handling, and blacklisting mechanisms for advanced applications.

Part 3 · Spring Security Deep Dive Series