Skip to content
AITroveRead. Build. Understand.
Reading list

Security

Authentication and browser boundaries

Spring Security applies authentication, authorization and browser protections at request boundaries.

Learning roadmap

Read the contract, run the source-kit checks, and inspect a rejected input before extending the application. This subject covers Spring and Spring Boot together; Java language lessons remain in their own subject.

Prerequisites

Use Java object ownership, interfaces, exceptions and Maven builds before the framework-specific lessons.

Section lessons

Continue learning

Boot Foundations, Spring Core, Web APIs, Data & Transactions, Testing, Production, Exercises, Quizzes, Projects.

Curriculum

Inspect the contract and its failure cases.

  1. 1Spring Security filter chain: authentication, CSRF and request order
  2. 2Spring PasswordEncoder: salted verification rather than reversible storage

Inspect the state boundary and run its checked fixture.

  1. 1Spring method authorization: test the proxied service boundary

Follow the input contract, inspect failures and run the checked source.

  1. 1Spring Security JWT resource server: validate trust before checking scope

Read the contract, run the checked fixture and inspect the rejected path.

  1. 1Spring method authorization: reject a cross-tenant read

Run the source-kit fixture and inspect its rejected boundary.

  1. 1Spring method security: reject a cross-tenant receipt mutation

Run the source-kit test and inspect the rejected case.

  1. 1Spring Security roles and authorities: check the actual granted string

Trace both accepted and rejected tenant requests.

  1. 1Spring Security JWT tenant principal: map only a validated claim
  2. 2Spring Security scope versus tenant ownership: two separate decisions
  3. 3Spring JWT tenant claims: reject missing or malformed ownership before conversion
  4. 4Spring JdbcTemplate tenant predicates: put ownership in the SQL query
  5. 5Spring tenant headers: prove they cannot override a signed identity

Trace a tenant-scoped command from token to committed rows.

  1. 1Spring Security bearer POST and CSRF: define the credential boundary

Check byte, storage and operational health boundaries.

  1. 1Spring file uploads: discard the supplied filename before writing
  2. 2Spring Security health probes: expose only the health path
Storage details