Understand the operating principles and structure of Spring Security and learn how to set up authentication and authorization features required for web applications by utilizing the various functions provided by Spring Security.
You can add authentication and authorization features to your web applications.
You can understand the Spring Security architecture.
You can learn how to write tests when applying Spring Security.
The security of the app I created
I have to take responsibility 💪
Let's say you're creating a bulletin board. Unless it's an anonymous bulletin board, you need to know which user is currently posting. You need a feature that is commonly called "login" and in Spring Security it's called Authentication or " authentication ."
Also, users who can edit a post must have at least the author or administrator rights for that post. At this time, as a developer, you must implement a function to apply the "Authorization " or "Access Control " function to your application so that only users with the appropriate rights can edit the post.
If it is a web application, it is also essential to respond to various web security related issues such as CSRF, XXS, session tampering, and Clickjacking.
This course covers the various features provided by Spring Security and understands the Spring Security architecture by applying them to form-based web applications.
Rather than simply applying the functions, you will learn the internal structure of how Spring Security works in servlet-based web applications . It will be very helpful in learning the internal structure of Spring Security, such as AuthenticationManager, AccessDecisionManager, and FilterChainProxy.
This lecture mainly covers servlet-based applications using Thymeleaf as a view template . It does not cover features supporting ACL, OAuth2, Reactive (WebFlux), and WebSockets, and briefly covers method security. However, if you study this lecture thoroughly , you will easily learn features not covered here.
You can learn how I learn by watching all my courses that I have made and will make in the future. I always value testing, but I am not obsessed with TDD (although I sometimes get feedback that it seems that way). I verify all the features by coding them myself, and I use the debugger for parts that I don't understand or want to look at in more detail.
In this course, you will also learn how to write test code and analyze it using a debugger when applying Spring Security.
💡 Note
This course is designed with the assumption that students have the following prerequisite knowledge. If there are any courses you have not taken or topics you have not studied yet, please make sure to study them before taking this course.
Who is this course right for?
Students or developers who want to implement form-based authentication and authorization functionality in their web applications.
Students or developers who want to understand Spring Security architecture.
Need to know before starting?
Spring Web MVC
Spring Boot
Spring Framework Core Technologies
Spring Data JPA (optional)
92,617
Learners
4,258
Reviews
2,010
Answers
4.8
Rating
20
Courses
네이버와 아마존을 거쳐 현재 Microsoft에서 시니어 소프트웨어 엔지니어로 일하고 있습니다.
아인슈타인은 "교육이란 사실을 가르치는 것이 아니라, 생각할 수 있는 힘을 기르는 것이다."라고 말했습니다. 그리고 저도 그 말에 깊이 공감하며 강의를 만들고 있습니다.
유튜브: '백기선' 채널에서 개발자 고민 상담 및 개발자에게 유용한 지식 공유
번역: 스프링 및 하이버네이트 관련 서적 다수 번역
저술: 쉽게 따라하는 자바 웹 개발
All
48 lectures ∙ (8hr 4min)
All
145 reviews
4.7
145 reviews
Reviews 6
∙
Average Rating 3.5
3
This lecture explains the architecture and very basic contents of Spring Security well. But it is true that there are many shortcomings. In fact, I don't know why the reviews are so good. The reasons I think so are as follows. 1. Since the architecture is explained only with debug and code, it is difficult for people who do not have a picture of the overall architecture in their heads to understand. A diagrammatic document is not as good as a well-organized blog. And when explaining the flow, I think you should draw a picture in advance or use a drawing program or tablet to explain it. That is because it is much easier to understand than just looking at the code. 2. The depth of the content is too basic. The reason is that they usually say that there are too many methods because they are afraid that the lecture will be too long, but I think they are targeting people who do not study hard because they are too downwardly leveled. This may be a guess, but even if it is true, there are too few use cases and they only teach very basic contents. 3. It is very common for the flow to be interrupted in the middle of a lecture. There are many cases where the flow is interrupted in a lecture that is less than 10 minutes long, so it makes me feel like I am not prepared for explaining something. - ps. I am currently taking AI and paid math classes for AI study, so I evaluated them with strict standards because they are very serious and well-prepared. I thought a lot about whether or not to say this because I was afraid that you might misunderstand, but I thought you might think I am leaving a bad review because of this part.. But I have to leave it. I was honestly a little disappointed when someone who always values testing asked a question, but he just looked at the documentation without checking the test and Spring code, and assumed that it would be like that.
Reviews 5
∙
Average Rating 4.4
Reviews 1
∙
Average Rating 3.0
3
First of all, I listened to the lecture well. It was good to learn about the basics of SpringSecurity. However, I don't think I would recommend this lecture to others. While listening to the lecture, I felt that the instructor only summarized the content he was going to explain when recording the video. In fact, the PDF he uploaded only had a rough outline, and many important contents were explained only verbally. Even the explanations felt more like he was explaining them from memory rather than preparing and organizing them in advance. That's why the explanations were too distracting for the listener, that is, for me. Things that weren't explained at the beginning of the lecture suddenly appeared in the end... Since this lecture was an online lecture, I watched it several times, so I was barely able to understand it, but honestly, it was too difficult. I trusted him because he was famous, so I bought it, but I was very disappointed. I hope that students will think about why they spend a lot of money to buy the lecture.
Reviews 1
∙
Average Rating 3.0
3
The instructor uses "uh...um...uh..." really, really, really a lot. Later, when I have time, I want to count how many times he uses "uh...um...uh...." in one lecture. But the quality of the lecture is not good either. The explanation is so scattered that I couldn't understand it no matter how many times I watched it. I bought it with high expectations because it was a famous person, but it was a lecture that fell short of my expectations. I want the students to think about why they paid a lot of money for the lecture.
Reviews 5
∙
Average Rating 5.0
5
After taking Mr. Kiseon's Spring Security class, I gained a deeper understanding of security and also got hints on how to study. In practice, when there was a problem with the security part, there were many cases where I couldn't find the debugging point, but after understanding the Spring Security architecture explained by Mr. Kiseon, it helped me a lot in practice. Also, I felt that development focused on what was working was just a shell, and the part where he taught the operating principles of each by finding the debugging point in the divide and conquer method and combining the principles in the latter part really made me hit my knees. It was the best lecture that allowed me to realize that if I start studying on my own in the future, I should study in this way. I highly recommend it to those who are new to Spring Security👍🏻
$68.20
Check out other courses by the instructor!
Explore other courses in the same field!
![[From JSP to Spring Boot] The Unwavering Path to SpringBoot강의 썸네일](https://cdn.inflearn.com/public/files/courses/334897/cover/01k2j21p3rz09cqh5s0frefaa5?f=avif&w=420)
![How to use Redis effectively, based on my experience working at a large company [Practice]강의 썸네일](https://cdn.inflearn.com/public/courses/335185/cover/c3a4bec6-a4b9-44c9-ab81-f3418d8d6042/335185.jpg?f=avif&w=420)
![File Upload Vulnerability Advanced Attack Techniques PART2 [Integrated Edition]강의 썸네일](https://cdn.inflearn.com/public/courses/333012/cover/12bd40e1-1e17-493a-81b9-64ac5fed558e/333012.png?f=avif&w=420)
![[Season 1] Spring AI in Action: Developing a Premium Reservation AI Agent강의 썸네일](https://cdn.inflearn.com/public/files/courses/339732/cover/01kb2qr7zw5gf0724jvv4rndns?f=avif&w=420)
