Spring Security Training

Delivery Options

• Live Online Training - Public Class (2 days): $1,050.00

» Free Demo

» Watch Presentation

» More Info

» Contact Education Consultant

• Customized Onsite Training (2 days): Request a Proposal

Upcoming Live eLearning Classes

There are currently no upcoming Live eLearning classes. Please contact us if you would like us to schedule a class.

Class Description

Class Overview

Class Goals

• Configure Spring Security for HTTP BASIC authentication.
• Implement form-based authentication.
• Configure other authentication features including remember-me, anonymous users, and logout.
• Apply authorization constraints to URLs and URL patterns.
• Bind authorization roles to user accounts in relational databases.
• Plug application-specific user realms into Spring Security by implementing UserDetailsService.
• Implement application-specific authorization constraints as AccessDecisionVoters.
• Fix authorization constraints over individual methods of service beans, in lieu of URL authorization or in tandem with it.

Class Outline

1. The Spring Framework
   1. Overview of Spring
   2. The Core Module
   3. Inversion of Control
   4. XML and Java Views of the Container
   5. Configuring JavaBeans
   6. Dependency Injection
   7. Web Application Contexts
2. Spring Security
   1. Acquiring and Integrating Spring Security
   2. Relationship to Spring
   3. Relationship to Java EE Standards
   4. Basic Configuration
   5. How It Works
   6. Integration: LDAP, CAS, X.509, OpeID, etc.
   7. Integration: JAAS
3. Authentication
   1. The <http> Configuration
   2. The <intercept-url> Constraint
   3. The <form-login> Configuration
   4. Login Form Design
   5. "Remember Me"
   6. Anonymous "Authentication"
   7. Logout
   8. The JDBC Authentication Provider
   9. The Authentication/Authorization Schema
   10. Using Hashed Passwords
   11. Channel Security
   12. Session Management
4. URL Authorization
   1. URL Authorization
   2. Programmatic Authorization: Servlets
   3. Programmatic Authorization: Spring Security
   4. Role-Based Presentation
   5. The Spring Security Tag Library
5. Under the Hood: Authentication
   1. The Spring Security API
   2. The Filter Chain
   3. Authentication Manager and Providers
   4. The Security Context
   5. Plug-In Points
   6. Implementing UserDetailsService
   7. Connecting User Details to the Domain Model
6. Under the Hood: Authorization
   1. Authorization
   2. FilterSecurityInterceptor and Friends
   3. The AccessDecisionManager
   4. Voting
   5. Configuration Attributes
   6. Access-Decision Strategies
   7. Implementing AccessDecisionVoter
   8. The Role Prefix
7. URL Authorization
   1. Method Authorization
   2. Using Spring AOP
   3. XML vs. Annotations
   4. Domain-Object Authorization
   5. The ACL Schema
   6. Interface Model
   7. ACL-Based Presentation

Class Materials

Each student in our Live Online and our Onsite classes receives a comprehensive set of materials, including course notes and all the class examples.

Class Prerequisites

Experience in the following areas is required:

• Java programming:
• Basic knowledge of XML:
• Some servlets and/or JSP experience will be beneficial for purposes of understanding the impact of each security feature that we configure. There is no web-application coding involved in the course.
• Experience with the Spring framework is strongly recommended

Technical Requirements

Our computer technical requirements and setup process is easy, with support just a click away.

• Onsite and Instructor-led Online course technical requirements and setup instructions.
• WebEx system requirements for Instructor-led Online delivery option.