Course Overview

An aerial view of the course structure, objectives, and what students can expect to gain by the end of the course.

Setting Up the Environment

Equip yourself with the tools and configurations needed to smoothly sail through the course.

Spring Essentials

A refresher on the foundational concepts of Spring Boot, setting the stage for deeper dives into security.

Architecture of Spring Security

Uncover the blueprint of Spring Security, providing insights into its foundational structure and mechanics.

Authentication vs Authorization

Learn the difference between proving who you are and what you're allowed to do in a system.

RBAC and Users

Dive into the world of role-based permissions and how users fit into this security model.

Security Tokens

Get acquainted with the tokens' role in securing user data and interactions.

OAuth2, SAML, OpenID Connect...

Go through the landscape of authentication protocols and understanding how they work.

Identity Management Providers

Explore third-party solutions that simplify and strengthen user identity management.

Configuring Postgres w/ Docker

Dive into setting up a secure database environment, leveraging the power and flexibility of Docker.

Service Layer

Understand the nuances of infusing security at the service layer of your application.

Annotations with Spring Security

Dive hands-on into the code, leveraging annotations to bolster security.

Securing Endpoints

Learn how to guard the gateways to your application data — the API endpoints.

Implementing SSL

Grasp the essentials of SSL/TLS, ensuring encrypted and secure communication.

Installing React

Understanding the fundamentals of React and setting it up.

Combine Spring Boot with React

Integrate Spring Boot with React using static resource directory.

Adding nonce to React and Spring Boot

Implementing nonce techniques, preventing replay attacks and ensuring unique transactions between React and Spring Boot.

Introduction to Keycloak

Enter the realm of Keycloak, a leading player in the Identity and Access Management arena.

Installing and Configuring Keycloak

Get hands-on with setting up Keycloak, tailoring it to your security needs.

Securing Microservices with JWT

JSON Web Tokens and their role in microservices security.

Securing Microservices with Opaque Tokens

Enhance microservice security by understanding and implementing opaque tokens.

OWASP ZAP

A hands-on lesson using OWASP ZAP to uncover vulnerabilities in a Spring app would add useful practical skills.