A few years ago I made a Spring Security course. Then everything changed β breaking changes, new APIs, deprecated stuff everywhere. The course aged badly and I didn't want to keep band-aiding it.
So we rebuilt the whole thing from scratch.
Here's the roadmap π
π Part 1 β Foundations
π Part 2 β JWT + Refresh Tokens
π Part 3 β Advanced (coming soon after)
Parts 1 & 2 drop next week.
Inside Part 1 (5+ hours):
β
Security Filter Chain β finally explained properly
β
AuthenticationProvider, AuthenticationManager, SecurityContextHolder
β
UserDetailsService + custom DAO auth
β
Form login, Basic Auth, sessions
β
BCrypt, salting, hashing, rainbow tables
β
Roles vs Authorities (and why ROLE_ exists π)
β
Storing users + roles + permissions in a DB
β
Security events with listeners
Then Part 2 goes deep on JWT + refresh tokens β the way it should be done.
If you've ever stared at a Spring Security config file and felt your soul leave your body⦠this one's for you.
π Drop a π below if you want me to tag you when it drops