Этот материал находится в платной подписке. Оформи премиум подписку и смотри или слушай Spring Security 6 Zero to Master along with JWT,OAUTH2, а также все другие курсы, прямо сейчас!
Премиум
  • Урок 1. 00:07:33
    Course Introduction
  • Урок 2. 00:04:00
    Details of Source Code, PDF Content & other instructions for the course
  • Урок 3. 00:07:08
    What is Security & Why it is important
  • Урок 4. 00:11:45
    Creating a simple Spring Boot app with out security
  • Урок 5. 00:06:43
    Securing Spring Boot basic app using Spring Security
  • Урок 6. 00:04:47
    Configure static credentials inside application properties file
  • Урок 7. 00:04:35
    Why should we use Spring Security framework
  • Урок 8. 00:05:07
    Quick introduction to Servlets & Filters
  • Урок 9. 00:10:25
    Introduction to Spring Security Internal flow
  • Урок 10. 00:14:25
    Demo of Spring Security internal flow
  • Урок 11. 00:04:51
    Sequence flow of the Spring Security default behaviour
  • Урок 12. 00:04:12
    Understanding on how multiple requests work with out credentials
  • Урок 13. 00:05:43
    Understanding about UI part of the EazyBank application
  • Урок 14. 00:03:09
    Backend REST services required for EazyBank app
  • Урок 15. 00:07:34
    Creating backend services needed for the EazyBank application - Part 1
  • Урок 16. 00:05:58
    Creating backend services needed for the EazyBank application - Part 2
  • Урок 17. 00:07:19
    Checking the default configuration inside the spring security framework
  • Урок 18. 00:06:51
    Modifying the code as per our custom requirements
  • Урок 19. 00:04:36
    Denying all the requests
  • Урок 20. 00:04:48
    Permit all the requests
  • Урок 21. 00:04:19
    Introduction to the agenda of the section
  • Урок 22. 00:09:38
    Configuring users using InMemoryUserDetailsManager - Approach 1
  • Урок 23. 00:05:24
    Configuring users using InMemoryUserDetailsManager - Approach 2
  • Урок 24. 00:08:52
    Understanding User Management interfaces and Classes
  • Урок 25. 00:12:01
    Deep Dive of UserDetails Interface & User class
  • Урок 26. 00:04:53
    Deep Dive of UserDetailsService & UserDetailsManager Interfaces
  • Урок 27. 00:12:04
    Deep Dive of UserDetailsManager Implementation classes
  • Урок 28. 00:13:14
    Creating MySQL Database in the cloud
  • Урок 29. 00:08:36
    Connecting to DB & Creating Users inside the DB as per JdbcUserDetailsManager
  • Урок 30. 00:11:19
    Using JdbcUserDetailsManager to perform authentication
  • Урок 31. 00:05:03
    Creating our own custom tables for Authentication
  • Урок 32. 00:08:56
    Creating JPA Entity and repository classes for new table
  • Урок 33. 00:09:55
    Creating our own custom implementation of UserDetailsService
  • Урок 34. 00:13:56
    Building a new REST API to allow the registration of new User
  • Урок 35. 00:08:46
    How our passwords validated in Spring Security by default
  • Урок 36. 00:06:35
    Encoding Vs Encryption Vs Hashing - Part 1
  • Урок 37. 00:10:08
    Encoding Vs Encryption Vs Hashing - Part 2
  • Урок 38. 00:03:02
    How Our passwords will be validated with hashing & PasswordEncoders
  • Урок 39. 00:04:49
    Deep dive of PasswordEncoder interface
  • Урок 40. 00:09:06
    Deep dive of PasswordEncoder implementation classes - Part 1
  • Урок 41. 00:06:17
    Deep dive of PasswordEncoder implementation classes - Part 2
  • Урок 42. 00:07:57
    Demo of registration of new user with Bcrypt password encoder
  • Урок 43. 00:09:45
    Demo of login with Bcrypt password encoder
  • Урок 44. 00:04:33
    Why should we consider creating our own AuthenticationProvider
  • Урок 45. 00:07:11
    Understanding AuthenticationProvider methods
  • Урок 46. 00:08:16
    Implementing and Customising the AuthenticationProvider inside our application
  • Урок 47. 00:05:30
    Testing our custom AuthenticationProvider implementation
  • Урок 48. 00:02:38
    Spring Security Sequence flow with custom AuthenticationProvider
  • Урок 49. 00:09:43
    Setting up the EazyBank UI project
  • Урок 50. 00:13:34
    Understanding the UI project and walkthrough of the Angular code
  • Урок 51. 00:09:43
    Creating new DB schema for EazyBank scenarios
  • Урок 52. 00:09:31
    Updating Backend project based on the latest DB schema
  • Урок 53. 00:03:54
    Testing registration of the new user with latest changes
  • Урок 54. 00:05:43
    Taste of CORs error
  • Урок 55. 00:03:54
    Introduction to CORs
  • Урок 56. 00:05:51
    Possible options to fix the CORs issue
  • Урок 57. 00:07:18
    Fixing CORs issue using Spring Security
  • Урок 58. 00:05:34
    Demo of default CSRF protection inside Spring Security
  • Урок 59. 00:05:27
    Introduction to CSRF attack
  • Урок 60. 00:05:57
    Solution to handle CSRF attacks
  • Урок 61. 00:05:12
    Ignoring CSRF protection for public APIs
  • Урок 62. 00:20:24
    Implementing CSRF token solution inside our web application
  • Урок 63. 00:09:47
    Testing the CSRF related changes
  • Урок 64. 00:05:58
    Authentication Vs Authorization
  • Урок 65. 00:07:11
    How Authorities stored inside Spring Security
  • Урок 66. 00:05:33
    Creating new table authorities to store multiple roles or authorities
  • Урок 67. 00:09:39
    Making backend changes to load authorities from new DB table
  • Урок 68. 00:03:15
    Configuring Authorities inside web application using Spring Security-Theory
  • Урок 69. 00:06:32
    Configuring Authorities inside web application using Spring Security - Coding
  • Урок 70. 00:04:07
    Authority Vs Role in Spring Security
  • Урок 71. 00:02:39
    Configuring Roles Authorization inside web app using Spring Security-Theory
  • Урок 72. 00:05:31
    Configuring Roles Authorization inside web app using Spring Security-Coding
  • Урок 73. 00:04:57
    Introduction to Filters in Spring Security and the sample use cases
  • Урок 74. 00:07:30
    Demo of Inbuilt Filters of Spring Security framework
  • Урок 75. 00:04:21
    How to create our own custom filter
  • Урок 76. 00:08:55
    Adding a custom filter using addFilterBefore() method
  • Урок 77. 00:05:54
    Adding a custom filter using addFilterAfter() method
  • Урок 78. 00:05:35
    Adding a custom filter using addFilterAt() method
  • Урок 79. 00:07:02
    Details about GenericFilterBean and OncePerRequestFilter
  • Урок 80. 00:03:45
    Demo of JSESSIONID and issues with it
  • Урок 81. 00:08:22
    Advantages of Token based Authentication
  • Урок 82. 00:06:31
    Deep dive about JWT Tokens - Part 1
  • Урок 83. 00:08:51
    Deep dive about JWT Tokens - Part 2
  • Урок 84. 00:06:16
    Making project configuration to use JWT tokens
  • Урок 85. 00:08:28
    Configuring filters to generate the JWT tokens
  • Урок 86. 00:08:17
    Configuring filters to validate JWT tokens
  • Урок 87. 00:02:55
    Making changes on the client side for JWT token based authentication
  • Урок 88. 00:05:42
    Validating the JWT changes made by running the applications
  • Урок 89. 00:02:59
    Validating the JWT token expiration scenario
  • Урок 90. 00:05:45
    Introduction to method level security in Spring Security
  • Урок 91. 00:08:23
    Details about method invocation authorization in method level security
  • Урок 92. 00:05:51
    Demo of method level security using @PreAuthorize
  • Урок 93. 00:03:28
    Demo of method level security using @PostAuthorize
  • Урок 94. 00:03:38
    Details about filtering authorization in method level security
  • Урок 95. 00:07:46
    Demo of @PreFilter annotation
  • Урок 96. 00:04:20
    Demo of @PostFilter annotation
  • Урок 97. 00:11:04
    Problems that OAUTH2 trying to solve
  • Урок 98. 00:06:31
    Introduction to OAUTH2
  • Урок 99. 00:04:55
    OAuth2 terminologies or jargons
  • Урок 100. 00:06:05
    OAuth2 Sample flow - Theory
  • Урок 101. 00:06:36
    Demo of OAuth2 Sample flow
  • Урок 102. 00:09:37
    Deep dive on Authorization code grant type flow in OAUTH2
  • Урок 103. 00:05:51
    Demo of Authorization code grant type flow in OAUTH2
  • Урок 104. 00:05:25
    Deep dive & Demo of implicit grant flow in OAUTH2
  • Урок 105. 00:04:24
    Deep dive of password grant type flow in OAUTH2
  • Урок 106. 00:03:32
    Deep dive of client credentials grant type flow in OAUTH2
  • Урок 107. 00:06:19
    Deep dive of refresh token grant type flow in OAUTH2
  • Урок 108. 00:02:55
    How resource server validates the tokens issued by Auth server
  • Урок 109. 00:10:22
    Introduction to OpenID Connect
  • Урок 110. 00:04:57
    Registering the client details with the GitHub to use it's OAUTH2 Auth server
  • Урок 111. 00:07:42
    Building a springboot application that uses GitHub Auth server during OAuth2
  • Урок 112. 00:04:41
    Running and verifying the sample application using GitHub OAUTH2
  • Урок 113. 00:02:22
    Introduction to OAUTH2 flow inside EazyBank web App
  • Урок 114. 00:04:43
    Introduction to KeyCloak Auth Server
  • Урок 115. 00:04:22
    Installation of KeyCloak server & setup admin account
  • Урок 116. 00:02:01
    Setup a Realm inside KeyCloak Server for EazyBank App
  • Урок 117. 00:04:48
    Creating Client Credentials inside KeyCloak for API-API secured invocations
  • Урок 118. 00:14:20
    Setup of EazyBank Resource Server
  • Урок 119. 00:07:55
    Getting Access token from KeyCloak using client credentials grant type
  • Урок 120. 00:04:58
    Passing Access token to Resource server for response through Postman
  • Урок 121. 00:02:43
    Understanding Authorization code grant type for EazyBank App
  • Урок 122. 00:03:58
    Creating Client and User details inside KeyCloak for Auth code grant flow
  • Урок 123. 00:09:04
    Testing Authorization code grant type using Postman App
  • Урок 124. 00:09:28
    Deep dive on Authorization code grant type with PKCE
  • Урок 125. 00:06:29
    Demo of Authorization code grant type with PKCE
  • Урок 126. 00:03:08
    Creating public facing client details inside KeyCloak server
  • Урок 127. 00:08:32
    Implementing PKCE Authorization code grant type inside Angular UI App - Part 1
  • Урок 128. 00:08:02
    Implementing PKCE Authorization code grant type inside Angular UI App - Part 2
  • Урок 129. 00:05:52
    Testing PKCE flow inside Eazy Bank application
  • Урок 130. 00:07:37
    Important features of KeyCloak
  • Урок 131. 00:05:28
    Social Login integration with the help of KeyCloak Server
  • Урок 132. 00:01:37
    Thank You and Congratulations