About Lesson
Signing up, logging in, and logging out are common functionalities needed in almost every project. Thankfully, we can leverage frameworks like Spring Security to implement these features effortlessly. To utilize Spring Security, we just need to add its dependency to our project. Here’s how you can do it using Maven:
https://mvnrepository.com/artifact/org.springframework.security/spring-security-core
<dependency>
<groupId>org.springframework.security</groupId>
<artifactId>spring-security-core</artifactId>
<version>6.2.4</version>
</dependency>
You can easily find this dependency by searching “spring security maven dependency” on Google or by clicking on the link provided below.
https://mvnrepository.com/artifact/org.springframework.security/spring-security-core/6.2.4
Spring Security -> Spring Security is a powerful authentication and authorization framework provided by the Spring ecosystem. It’s used to secure Java applications by controlling access to resources. Here’s a simplified breakdown of how Spring Security works:
- Authentication: Authentication is the process of verifying the identity of a user or system trying to access an application. Spring Security provides various authentication mechanisms, including form-based login, HTTP Basic authentication, and OAuth.
- Authorization: Authorization determines what actions a user or system is allowed to perform within the application. Spring Security allows developers to define access control rules based on roles, permissions, or other criteria.
- Security Filters: Spring Security integrates with servlet filters to intercept incoming requests and enforce security policies. These filters handle tasks such as authentication, authorization, and session managemen
- User Management: Spring Security simplifies user management by providing features for user registration, password storage, and password hashing. It also supports integration with existing user databases or external identity providers.
- Customization: Developers can customize Spring Security to meet the specific security requirements of their applications. This includes configuring authentication providers, defining access control rules, and implementing custom security logic
- Integration: Spring Security seamlessly integrates with other components of the Spring ecosystem, such as Spring Boot, Spring MVC, and Spring Data. This allows developers to build secure applications using familiar Spring technologies.
Next Add this dependency to pom file
Next create a “security” package
Spring Auth Server -> It refers to a server built using the Spring framework that handles authentication, which is the process of verifying the identity of users or systems trying to access resources.
Search on Google “spring auth server getting started”
click on this link and follow the document
https://docs.spring.io/spring-authorization-server/reference/getting-started.html
add Spring Boot’s starter for Spring Authorization Server as a dependency:
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-oauth2-authorization-server</artifactId>
</dependency>