spring-security.md

Spring Security Guts

• Spring Security: Authentication and Authorization In-Depth
• Spring Security - Understanding AuthenticationProvider and creating a custom one

What Spring Security is and how its core features like authentication, authorization or common exploit protection work. Also, a comprehensive FAQ.

@Controller
public class MyController {
  @GetMaping("/login")
  public String login(Model model, CsrfToken token) {
    // the token will be injected automatically
    return "/templates/login";
  }
}

Add CSRF To HTML Automatically

https://dev.to/nicholas_moen/what-i-learned-while-using-django-with-htmx-and-alpine-js-24jg

<script>
  document.body.addEventListener(
    'htmx:configRequest', (event) => {
      event.detail.headers['X-CSRFToken'] = '{{ csrf_token }}';
  })
</script>

Spring Security and JWT

• https://www.freecodecamp.org/news/how-to-setup-jwt-authorization-and-authentication-in-spring/
• https://insource.io/blog/articles/stateless-api-security-with-spring-boot-part-2.html

Database-Backed Spring Security

• https://www.baeldung.com/spring-security-authentication-with-a-database