Spring Security Training: Introduction to Spring Security

Spring Security Training Outline

• The Spring Framework
• Overview of Spring
• The Core Module
• Inversion of Control
• XML and Java Views of the Container
• Configuring JavaBeans
• Dependency Injection
• Web Application Contexts
• Spring Security
• Acquiring and Integrating Spring Security
• Relationship to Spring
• Relationship to Java EE Standards
• Basic Configuration
• How It Works
• Integration: LDAP, CAS, X.509, OpeID, etc.
• Integration: JAAS
• Authentication
• The <http> Configuration
• The <intercept-url> Constraint
• The <form-login> Configuration
• Login Form Design
• "Remember Me"
• Anonymous "Authentication"
• Logout
• The JDBC Authentication Provider
• The Authentication/Authorization Schema
• Using Hashed Passwords
• Channel Security
• Session Management
• URL Authorization
• URL Authorization Overview
• Programmatic Authorization: Servlets
• Programmatic Authorization: Spring Security
• Role-Based Presentation
• The Spring Security Tag Library
• Under the Hood: Authentication
• The Spring Security API
• The Filter Chain
• Authentication Manager and Providers
• The Security Context
• Plug-In Points
• Implementing UserDetailsService
• Connecting User Details to the Domain Model
• Under the Hood: Authorization
• Authorization Overview
• FilterSecurityInterceptor and Friends
• The AccessDecisionManager
• Voting
• Configuration Attributes
• Access-Decision Strategies
• Implementing AccessDecisionVoter
• The Role Prefix
• URL Authorization
• Method Authorization
• Using Spring AOP
• XML vs. Annotations
• Domain-Object Authorization
• The ACL Schema
• Interface Model
• ACL-Based Presentation
• Conclusion