Spring Security

Understand the operating principles and structure of Spring Security and learn how to set up authentication and authorization features required for web applications by utilizing the various functions provided by Spring Security.

(4.7) 수강평 148개

강의소개.상단개요.수강생.short

난이도 중급이상

수강기한 무제한

Java
Java
Spring
Spring
Java
Java
Spring
Spring

먼저 경험한 수강생들의 후기

먼저 경험한 수강생들의 후기

4.7

5.0

JuNu

90% 수강 후 작성

After taking Mr. Kiseon's Spring Security class, I gained a deeper understanding of security and also got hints on how to study. In practice, when there was a problem with the security part, there were many cases where I couldn't find the debugging point, but after understanding the Spring Security architecture explained by Mr. Kiseon, it helped me a lot in practice. Also, I felt that development focused on what was working was just a shell, and the part where he taught the operating principles of each by finding the debugging point in the divide and conquer method and combining the principles in the latter part really made me hit my knees. It was the best lecture that allowed me to realize that if I start studying on my own in the future, I should study in this way. I highly recommend it to those who are new to Spring Security👍🏻

5.0

두램

100% 수강 후 작성

It was a great help in understanding security that I had only used without understanding it properly. I have taken many of Baek Gi-seon's lectures, but I am personally very satisfied with this security lecture. Thank you~~

5.0

jiny

100% 수강 후 작성

I only listened to 50% of it, but it was good because I could easily understand the overall architecture while simply debugging a huge amount. Of course, I think it would be better to follow along in the middle. There are parts that go by too quickly, so if you don't understand for a moment, I think you will definitely understand if you take your time and try it out yourself. (I think you should definitely know Java and SPRING to some extent.) I was worried because there were people who said it was good and people who said it was bad, but I think I will definitely get more out of it. I first started with Ki-seon's lecture on security, and I think I will pay for the next lecture as well (It's too expensive for me though.. ㅜ)

강의상세_배울수있는것_타이틀

  • You can add authentication and authorization features to your web applications.

  • You can understand the Spring Security architecture.

  • You can learn how to write tests when applying Spring Security.

The security of the app I created
I have to take responsibility 💪

‘Authentication’ and ‘Authorization’ are required in the app! 🔥

Let's say you're creating a bulletin board. Unless it's an anonymous bulletin board, you need to know which user is currently posting. You need a feature that is commonly called "login" and in Spring Security it's called Authentication or " authentication ."

Also, users who can edit a post must have at least the author or administrator rights for that post. At this time, as a developer, you must implement a function to apply the "Authorization " or "Access Control " function to your application so that only users with the appropriate rights can edit the post.

If it is a web application, it is also essential to respond to various web security related issues such as CSRF, XXS, session tampering, and Clickjacking.


Lecture Introduction 📖

#1.
Spring Security's
Apply various functions

This course covers the various features provided by Spring Security and understands the Spring Security architecture by applying them to form-based web applications.

#2.
Spring Security's
Internal structure

Rather than simply applying the functions, you will learn the internal structure of how Spring Security works in servlet-based web applications . It will be very helpful in learning the internal structure of Spring Security, such as AuthenticationManager, AccessDecisionManager, and FilterChainProxy.

#3.
In popular app format
Selection and Focus

This lecture mainly covers servlet-based applications using Thymeleaf as a view template . It does not cover features supporting ACL, OAuth2, Reactive (WebFlux), and WebSockets, and briefly covers method security. However, if you study this lecture thoroughly , you will easily learn features not covered here.


A word from a knowledge sharer 🧑‍🏫

You can learn how I learn by watching all my courses that I have made and will make in the future. I always value testing, but I am not obsessed with TDD (although I sometimes get feedback that it seems that way). I verify all the features by coding them myself, and I use the debugger for parts that I don't understand or want to look at in more detail.

In this course, you will also learn how to write test code and analyze it using a debugger when applying Spring Security.

💡 Note

  • It doesn't matter which IDE you use. Use the one you are familiar with .
  • This course uses the paid version of IntelliJ IDEA . You can still follow the course using the free version, but some steps may seem more convenient than others.
  • You can enjoy a similar level of convenience if you use the Eclipse-based STS (Spring Tool Suite) provided for free by Spring .

Required Player Knowledge 🤓

This course is designed with the assumption that students have the following prerequisite knowledge. If there are any courses you have not taken or topics you have not studied yet, please make sure to study them before taking this course.


References 📜


강의소개.콘텐츠.추천문구

학습 대상은 누구일까요?

  • Students or developers who want to implement form-based authentication and authorization functionality in their web applications.

  • Students or developers who want to understand Spring Security architecture.

선수 지식, 필요할까요?

  • Spring Web MVC

  • Spring Boot

  • Spring Framework Core Technologies

  • Spring Data JPA (optional)

강의소개.지공자소개

92,902

수강생

4,303

수강평

2,010

답변

4.8

강의 평점

20

강의_other

Having worked at Naver and Amazon, I am currently working as a Senior Software Engineer at Microsoft.

Einstein once said, "Education is not the learning of facts, but the training of the mind to think." I create my lectures with deep resonance for those words.

YouTube: Sharing useful knowledge and career advice for developers on the
'Keesun Baik' channel
Translation: Translated numerous books related to Spring and Hibernate
Author: Easy-to-Follow Java Web Development

더보기

커리큘럼

전체

48개 ∙ (강의상세_런타임_시간 강의상세_런타임_분)

강의 게시일: 
마지막 업데이트일: 

수강평

전체

148개

4.7

148개의 수강평

  • jwdeveloper님의 프로필 이미지
    jwdeveloper

    수강평 5

    평균 평점 5.0

    5

    90% 수강 후 작성

    After taking Mr. Kiseon's Spring Security class, I gained a deeper understanding of security and also got hints on how to study. In practice, when there was a problem with the security part, there were many cases where I couldn't find the debugging point, but after understanding the Spring Security architecture explained by Mr. Kiseon, it helped me a lot in practice. Also, I felt that development focused on what was working was just a shell, and the part where he taught the operating principles of each by finding the debugging point in the divide and conquer method and combining the principles in the latter part really made me hit my knees. It was the best lecture that allowed me to realize that if I start studying on my own in the future, I should study in this way. I highly recommend it to those who are new to Spring Security👍🏻

    • glendev님의 프로필 이미지
      glendev

      수강평 2

      평균 평점 4.5

      4

      100% 수강 후 작성

      It was very helpful in understanding the Spring Security architecture. However, I wish there was more time spent on practical application rather than debugging almost all filters and covering the source level in depth. For example, I wish there were more examples of how to manage user authorization information and resource access information by authorization as a database and apply them, and more examples of various applications in the latter part of the lecture. I think it would have been possible to reduce unnecessary time if the part where you create a new project every time the lecture starts was omitted.

      • henu님의 프로필 이미지
        henu

        수강평 9

        평균 평점 5.0

        5

        100% 수강 후 작성

        I think I learned about the working principles of Spring Security and how to customize it over the course of a month. When I was working on a Spring Framework project without knowing about security, I implemented HandlerInterceptor to handle authentication/authorization using the user information and authority (Integer value) contained in the Session. I learned about security as well, and I plan to change the authentication/authorization method of the existing toy project. Thank you for the great lecture and knowledge sharing. I think I should watch this lecture again to review after taking the REST API lecture.

        • jiny님의 프로필 이미지
          jiny

          수강평 28

          평균 평점 5.0

          5

          100% 수강 후 작성

          I only listened to 50% of it, but it was good because I could easily understand the overall architecture while simply debugging a huge amount. Of course, I think it would be better to follow along in the middle. There are parts that go by too quickly, so if you don't understand for a moment, I think you will definitely understand if you take your time and try it out yourself. (I think you should definitely know Java and SPRING to some extent.) I was worried because there were people who said it was good and people who said it was bad, but I think I will definitely get more out of it. I first started with Ki-seon's lecture on security, and I think I will pay for the next lecture as well (It's too expensive for me though.. ㅜ)

          • durin29030411님의 프로필 이미지
            durin29030411

            수강평 1

            평균 평점 5.0

            5

            100% 수강 후 작성

            It was a great help in understanding security that I had only used without understanding it properly. I have taken many of Baek Gi-seon's lectures, but I am personally very satisfied with this security lecture. Thank you~~

            whiteship님의 다른 강의

            지식공유자님의 다른 강의를 만나보세요!

            비슷한 강의

            같은 분야의 다른 강의를 만나보세요!

            강의상세.할인문구

            $61,600.00

            30%

            $68.20