šØ Spring Security 7 - IT'S FINALLY HAPPENING
A few years ago I made a Spring Security course. Then everything changed ā breaking changes, new APIs, deprecated stuff everywhere. The course aged badly and I didn't want to keep band-aiding it. So we rebuilt the whole thing from scratch. Here's the roadmap š š Part 1 ā Foundations š Part 2 ā JWT + Refresh Tokens š Part 3 ā Advanced (coming soon after) Parts 1 & 2 drop next week. Inside Part 1 (5+ hours): ā
Security Filter Chain ā finally explained properly ā
AuthenticationProvider, AuthenticationManager, SecurityContextHolder ā
UserDetailsService + custom DAO auth ā
Form login, Basic Auth, sessions ā
BCrypt, salting, hashing, rainbow tables ā
Roles vs Authorities (and why ROLE_ exists š) ā
Storing users + roles + permissions in a DB ā
Security events with listeners Then Part 2 goes deep on JWT + refresh tokens ā the way it should be done. If you've ever stared at a Spring Security config file and felt your soul leave your body⦠this one's for you. š Drop a š below if you want me to tag you when it drops