Spring Security in Action, Second Edition

by Laurentiu Spilca

Design and develop Spring applications that are secure right from the start.

In Spring Security in Action, Second Edition you will learn essential security skills including how



Spring Security in Action, Second Edition is a revised version of the bestselling original, fully updated for Spring Boot 3 and Oauth2/OpenID Connect. This new edition covers the latest patterns for application-level security in Spring apps, demonstrating how Spring Security simplifies every step of the security process. Code samples and useful real-world examples give you hands-on experience of protecting your apps from common threats such as injection attacks and poor monitoring.

About the technology

Spring Security is essential for any Java developer looking to master authentication and authorization in Spring apps. By adopting "secure by design" principles with Spring Security's out-of-the-box features, you can protect your apps from data theft and unauthorized intrusions.

About the book

Spring Security in Action, Second Edition reveals the Spring Security techniques and tools you need to defend your apps against attack. In this book, author Lauren?iu Spilca, a skilled Java and Spring developer, will teach you how to build your own authorization server, manage system users, configure secure endpoints, and prevent cross-site scripting and request forgery attacks. This new second edition delves into the OAuth 2/OpenID Connect stack and details SecurityFilterChain for security configuration. Don't let security be an afterthought. Start protecting your apps from the first line of code!

About the reader

For experienced Java and Spring developers.

About the author

Laurentiu Spilca is a skilled Java and Spring developer and an experienced technology instructor. He is also the author of Manning’s Spring Start Here and Troubleshooting Java.

Genres: Programming, Computer Science

440 pages, Paperback

Published May 14, 2024

Reviews

[dantelk · Rating 4 out of 5]

I think this is a good primer for understanding Spring 6's security architecture. Although the text is a bit dry, I was able to survive even when reading it while commuting. This is a "in action" (ie code examples) series book, tough you don't have to be behind a computer to grasp the content.

I only think that the OAUTH section should have made a better introduction to the concept.

I would recommend this book to collogues who are working with Spring: this is a good book which guides on both high and low level. However, I'd also recommend supplementing this book with Daniel Garnier-Moiroux 's presentations on youtube. Java Brains channel has a good insight into Oauth2, you can watch him on youtube for an introduction to this specific topic.

[Iurii Mednikov · Rating 5 out of 5]

Without any doubts, this is one of those books that you have to read before you will call yourself a Java developer. If you think that Spring Security is useless - this is due to the fact that you are not aware about its capabilities yet. The "Spring Security in Action (2nd edition)" should be your starting point when you want to learn Spring Security.

[Kameron Arceneaux · Rating 4 out of 5]

It is a good book and very detailed. Provider's a good primer into Spring Security and introduces best practices. Personally, I've learned a lot from it and feel more knowledgeable about Spring Security.

[Giuseppe Catalano · Rating 5 out of 5]

"Spring Security in Action" is an invaluable resource for developers looking to deepen their understanding of securing Java applications with Spring. The book offers a clear, hands-on approach, walking readers through core concepts like authentication, authorization, and securing APIs.

[Amarjit Bhandal · Rating 5 out of 5]

Have read both 1st and 2nd editions and keep them handy on my desk. Covers every aspect of Spring Security in great detail.

[Soumyakanti · Rating 5 out of 5]

Easily one of the best gateway books to get a solid base on Spring Security.

[__init__ · Rating 4 out of 5]

If you want to learn Spring Security from scratch, I recommend this book. It's well-written and targets all levels of learners, from beginners to advanced users.

[Akinwale Habib · Rating 4 out of 5]

I like the fact that the book makes no assumptions about the readers experience with Spring Security. This book teaches all the basics of Spring Security such as Authentication Filters, Security Context, Authorization Filters, User Details, User Details Service, Password encoder. The book also covers advanced concepts like to OAuth2, resource and authorization servers.

This is the book to read if you need in depth knowledge of Spring Security and how to properly use it in a real world app.