A few years ago I made a Spring Security course. Then everything changed โ breaking changes, new APIs, deprecated stuff everywhere. The course aged badly and I didn't want to keep band-aiding it.
So we rebuilt the whole thing from scratch.
Here's the roadmap ๐
๐ Part 1 โ Foundations
๐ Part 2 โ JWT + Refresh Tokens
๐ Part 3 โ Advanced (coming soon after)
Parts 1 & 2 drop next week.
Inside Part 1 (5+ hours):
โ
Security Filter Chain โ finally explained properly
โ
AuthenticationProvider, AuthenticationManager, SecurityContextHolder
โ
UserDetailsService + custom DAO auth
โ
Form login, Basic Auth, sessions
โ
BCrypt, salting, hashing, rainbow tables
โ
Roles vs Authorities (and why ROLE_ exists ๐)
โ
Storing users + roles + permissions in a DB
โ
Security events with listeners
Then Part 2 goes deep on JWT + refresh tokens โ the way it should be done.
If you've ever stared at a Spring Security config file and felt your soul leave your bodyโฆ this one's for you.
๐ Drop a ๐ below if you want me to tag you when it drops