Spring Security Patterns

Рет қаралды 28,268

Күн бұрын

What architectural patterns does Spring Security follow? This talk starts with an insecure application and secures it from the ground up. It’ll examine patterns that are repeated throughout Spring Security and explain why they are there. Among others, you’ll learn about Spring Security’s filter chain, its authentication manager, and its preference for final classes and private methods.
Josh Cummings, Software Engineer at VMware; Eleftheria Stein, Software Engineer at VMware
Slides: www.slideshare.net/Pivotal/sp...

Пікірлер: 17

@IScorpionI 3 жыл бұрын

Great talk with many valuable background information on underlying patterns and decisions. Also great idea to paste those code blocks using code templates during the talk.

@chrizzking 3 жыл бұрын

great talk and very easy to follow along the code provided. Thanks guys!

@mirageman2 3 жыл бұрын

Great work, please more of this :)

@laubrino 2 жыл бұрын

Great video. And right from the source!

@vishnumurali522 3 жыл бұрын

Great work...👏👏👏👏

@guruprasadrao7 Жыл бұрын

Gold level talk

@alexandroskourtis5268 3 жыл бұрын

Great talk :))

@PradeepKumar-bp4lp 3 жыл бұрын

Thanks bro

@allisonmachado 3 жыл бұрын

bom demais!

@sacch6579 3 жыл бұрын

I am wondering if one can have one version of git code with security and one without? If yes, is it easy to be maintained in parallel?

@deryamilas2593 2 жыл бұрын

do you guys have any video for authorization based on roles in spring security

@IvanRandomDude 3 жыл бұрын

28:44 If Only Java had expressions (Expression in this case) like C# so we could use it to specify what field of auth object we want instead of using magic string.

@adambickford8720 3 жыл бұрын

Java does have that (Function) but the problem is that annotations have to be known at compile time (short of stupid reflection hacks)

@saurabhsuman4960 Жыл бұрын

@songbaiyin7830 Жыл бұрын

I wish spring security does not include a default filter chain, they are useless. Every time I had to disable csrf here and disable stateful session there. I would be thinking: why don't we have a RestApiFilterChain. becoz rest api is the main stream now. Also could spring security be more opinionated and less flexible? Just have one way to do things and do things right. The spring security will be much much easier then.

@michaelholopainen2822 2 жыл бұрын

The DSL... the HTTP Security DSL is the biggest failures of Spring Framework. It is absolutely horrible. It is unreadable spaghetti code. It absolutely needs block level elements which the fluent inferface does not have. Fluent works and is readable when it ALWAYS returns the same type. NO one knows how to get the HttpSecurity to work. Every time is is just random stabs in the dark until it suddenly kind-of works and then they to make your app support what ever you got to work that is close enough of what you wanted.