Spring Security
Explore Spring Security articles in Frameworks.
Java Application Security Fundamentals
Learn Java Application Security fundamentals with Spring Boot, authentication, authorization, password hashing, secure API design, input validation, logging, secrets management, and production security best practices.
Authentication vs Authorization in Java
Learn Authentication and Authorization in Java and Spring Security with real-world examples, diagrams, step-by-step implementation, role-based access control, and production best practices.
Spring Security Architecture Deep Dive
Learn Spring Security Architecture from beginner to advanced level. Understand SecurityFilterChain, AuthenticationManager, AuthenticationProvider, UserDetailsService, SecurityContext, JWT Filters, Authorization Flow, and complete Spring Boot implementation.
Secure Password Hashing with BCrypt
Learn how to securely store passwords in Java and Spring Boot using BCrypt. Understand hashing, salting, PasswordEncoder, registration flow, login verification, database storage, and production best practices.
Role-Based Access Control with Spring Security
Learn how to implement Role-Based Access Control (RBAC) in Spring Boot using Spring Security. Understand users, roles, permissions, URL security, method-level security, database-based roles, BCrypt, and real-world enterprise examples.
JWT Authentication in Spring Boot
Learn how to implement JWT authentication in Spring Boot step by step using Spring Security, BCrypt, custom JWT filter, login API, token generation, token validation, and protected APIs.
Refresh Token Implementation in Java
Learn how to implement Refresh Token flow in Java and Spring Boot with JWT access tokens, refresh tokens, database storage, token rotation, logout, expiry handling, and production best practices.
OAuth2 Login with Google and GitHub in Spring Boot
Learn how to implement OAuth2 Login in Spring Boot using Google and GitHub. Understand OAuth2 flow, client registration, redirect URI, Spring Security configuration, user profile extraction, and production best practices.
OpenID Connect with Spring Security
Learn OpenID Connect (OIDC) with Spring Security step by step. Understand OAuth2 vs OIDC, ID Token, Access Token, UserInfo Endpoint, claims, Google OIDC login, Spring Boot configuration, and real-world implementation.
API Key Authentication for Internal APIs
Learn how to implement API Key Authentication in Spring Boot for internal APIs, service-to-service communication, webhook APIs, partner APIs, custom filters, header validation, database-backed API keys, and production best practices.
Rate Limiting APIs with Bucket4j and Redis
Step-by-step guide to implement distributed API rate limiting in Spring Boot using Bucket4j and Redis.
CORS and CSRF Protection in Spring Boot
Learn CORS and CSRF protection in Spring Boot, including browser security, allowed origins, preflight requests, CSRF tokens, stateless APIs, and secure configuration patterns.
LDAP Authentication with Spring Boot
Learn LDAP authentication with Spring Boot and Spring Security, including directory concepts, bind authentication, user lookup, groups, authorities, and enterprise login integration.
SAML SSO Integration in Java Applications
Learn SAML SSO integration for Java and Spring applications, including identity providers, service providers, assertions, metadata, certificates, login flow, and production setup.
Multi-Factor Authentication Implementation
Learn multi-factor authentication in Java applications, including OTP, TOTP, backup codes, verification flow, risk-based MFA, recovery, and secure implementation practices.
Method-Level Security with PreAuthorize
Learn method-level security in Spring Boot using @PreAuthorize, @PostAuthorize, SpEL expressions, roles, permissions, ownership checks, and service-layer authorization.
Secure Microservice-to-Microservice Communication
Learn secure service-to-service communication in Java microservices, including service identity, token propagation, mTLS, API gateways, zero-trust principles, and internal API protection.
mTLS Authentication between Java Services
Learn mutual TLS authentication between Java services, including certificates, keystores, truststores, client authentication, service identity, and Spring Boot configuration concepts.
Field-Level Encryption in Spring Boot
Learn field-level encryption in Spring Boot, including when to encrypt selected fields, key handling, service-layer encryption, JPA considerations, and production security practices.
Database Encryption and JPA Attribute Converter
Learn how to use JPA AttributeConverter for transparent field encryption, including encryption flow, entity mapping, key management, limitations, and production practices.
Secrets Management using AWS Secrets Manager
Learn secrets management with AWS Secrets Manager for Java and Spring Boot applications, including secret storage, IAM permissions, retrieval, rotation, caching, and production practices.
Hashing vs Encryption vs Tokenization
Learn the difference between hashing, encryption, tokenization, and masking, including when to use each technique for passwords, PII, payment data, logs, and compliance.
PII Data Masking in Java Applications
Learn PII data masking in Java applications, including masking emails, phone numbers, account numbers, tokens, logs, DTOs, and safe response design.
Secure Logging and Preventing Sensitive Data Leaks
Learn secure logging in Java applications, including redaction, structured logs, audit events, sensitive data prevention, token masking, and production logging practices.
OWASP Top 10 for Java Developers
Learn the OWASP Top 10 from a Java developer perspective, including broken access control, injection, insecure design, vulnerable components, logging, SSRF, and secure prevention patterns.
Input Validation and SQL Injection Prevention
Learn input validation and SQL injection prevention in Java and Spring Boot, including Bean Validation, parameterized queries, ORM safety, allowlists, and secure query design.
Secure File Upload Implementation
Learn secure file upload implementation in Java and Spring Boot, including file validation, size limits, storage safety, content type checks, path traversal prevention, and malware scanning.
Security Headers in Spring Boot
Learn security headers in Spring Boot and Spring Security, including CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, and browser hardening.
Vulnerability Scanning with OWASP Dependency Check
Learn vulnerability scanning for Java dependencies using OWASP Dependency Check, including CVEs, build integration, reports, suppressions, dependency updates, and production practices.
Production Security Checklist for Java Applications
A practical production security checklist for Java and Spring Boot applications covering authentication, authorization, secrets, logging, headers, dependencies, monitoring, and incident readiness.
Spring Security Learning Path
A clean Spring Security and Java application security learning path covering authentication, authorization, JWT, OAuth2, OIDC, SAML, MFA, API protection, microservice security, data protection, OWASP, and production hardening.