Spring Security 5Tag Archive

New Password Storage In Spring Security 5 1. Introduction With the latest Spring Security release, a lot has changed. One of those changes is how we can handle password encoding in our applications. In this tutorial, we’re going to explore some of these changes. Later, we’ll see how to configure… Continue Reading spring-security-5-password-storage

Spring Security Kerberos Integration 1. Overview In this tutorial, we’ll provide an overview of Spring Security Kerberos. We’ll write a Kerberos client in Java that authorizes itself to access our Kerberized service. And we’ll run our own embedded Key Distribution Center to perform full, end-to-end Kerberos authentication. All that, without… Continue Reading spring-security-kerberos-integration

Spring Security OAuth Login with WebFlux 1. Overview Spring Security added OAuth support for WebFlux starting with the 5.1.x GA. We’ll discuss how to configure our WebFlux application to use OAuth2 Login support. We’ll also discuss how to use WebClient to access OAuth2 secured resources. The OAuth Login configuration for… Continue Reading spring-oauth-login-webflux

Spring Security 5 for Reactive Applications 1. Introduction In this article, we’ll explore new features of the Spring Security 5 framework for securing reactive applications. This release is aligned with Spring 5 and Spring Boot 2. In this article, we won’t go into details about the reactive applications themselves, which… Continue Reading spring-security-5-reactive

Default Password Encoder in Spring Security 5 1. Overview In Spring Security 4, it was possible to store passwords in plain text using in-memory authentication. A major overhaul of the password management process in version 5 has introduced more secure default mechanism for encoding and decoding passwords. This means that… Continue Reading spring-security-5-default-password-encoder

Spring Security 5 – OAuth2 Login 1. Overview Spring Security 5 introduces a new OAuth2LoginConfigurer class that we can use for configuring an external Authorization Server. In this article, we’ll explore some of the various configuration options available for the oauth2Login() element. 2. Maven Dependencies In addition to the standard… Continue Reading spring-security-5-oauth2-login