Bootiful Spring Security

I'm honored to be speaking with @starbuxman.joshlong.com at @devnexus.bsky.social about Bootiful #SpringSecurity

For additional information see devnexus.org/events/booti...

I hope to see you there!

#Spring #Java #devnexus

Check out what's new in the #Spring community 👉 bit.ly/3MXPcnD

The 2nd milestone releases of: Spring Boot, Spring Security, Spring Integration, Spring Modulith and Spring AMQP; Spring for Apache Kafka & Spring LDAP; and more.

#Java #SpringBoot #SpringData #SpringSecurity #SpringAMQP #ApacheKafka

Building a LeetCode App: Part 6

Moving from traditional MVC to a reactive stack (WebFlux) was interesting.

Spring Security behaves differently since SecurityContext is thread-bound in MVC.

#SpringSecurity #WebFlux

This #InfoQ article explores a solution for Registering & Authenticating users through a client-side JavaScript application using the #SpringSecurity infrastructure, access and refresh tokens.

🎯 The goal: Clear, step-by-step #FlowDiagrams make the process easy to follow!

👉 bit.ly/3PJ3YMA

#Java

There is also #SpringSecurity integration and #Actuator integration examples on the website. Really interested to hear feedback from #Spring developers.

Dive into the latest releases from #Spring 👉 bit.ly/4pyyubY

GA releases of Spring Boot, Spring Security, Spring for GraphQL, Spring Integration, Spring Modulith, Spring REST Docs and Spring Batch.

#Java #SpringBoot #SpringSecurity #SpringFramework #ApacheKafka #AMQP #GraphQL

🌱#SpringSecurity skaliert nicht von selbst. Cristian Schuszter zeigt Architekturmuster für #OAuth2, OIDC, Multi-IdP-Setups, #SSO & API-Gateways.

#jaxcon 2026 · 4. – 8. Mai · Mainz oder Online

ℹ️ Zur Session:https://f.mtr.cool/vzkxwypbvk

🎟️ Tickets sichern: https://f.mtr.cool/kdetwwrmdx

I've done a lot of cleanup on #SpringSecurity MFA support this past week. The updates (along with improved docs) can be seen in the reference docs.spring.io/spring-secur...

#SpringSecurity 7 added MFA support docs.spring.io/spring-secur...

tldr Add following to require both password and one time token

`@EnableGlobalMultiFactorAuthentication(authorities = {
GrantedAuthorities.FACTOR_PASSWORD_AUTHORITY,
GrantedAuthorities.FACTOR_OTT_AUTHORITY })`

HTTP Service Client Enhancements Level up your Java code and explore what Spring can do for you.

The next instalment of the Road to GA series about a cross-project, collaborative effort on new capabilities for HTTP service clients is now live spring.io/blog/2025/09...

#SpringFramework #SpringBoot #SpringCloud #SpringSecurity

Spring Authorization Server moving to Spring Security 7.0 Level up your Java code and explore what Spring can do for you.

Exciting News! Spring Authorization Server is moving to #SpringSecurity 7.0

spring.io/blog/2025/09...

Ever wanted to be able to change how the built in #SpringSecurity hasRole hasAuthority, etc methods work but continue to use the existing DSL? Enter AuthorizationManagerFactory.... docs.spring.io/spring-secur...

Thanks x.com/sjohnr for your PR github.com/spring-proje...

Check out what's new in the #Spring community 👉 bit.ly/3HW4Q0a

The second milestone releases of Spring Boot, Spring Security, Spring Authorization Server, Spring for GraphQL, Spring Session, Spring Integration, Spring REST Docs, and more.

#Java #SpringBoot #SpringSecurity #SpringFramework

How I Implemented GitHub OAuth2 into My Spring Boot + Angular App N1netails Not everyone wants to log into a website using a basic email and password form. Sometimes it’s due to...

How I Implemented GitHub OAuth2 into My Spring Boot + Angular App N1netails Not everyone wants to log into a website using a basic email and password form. Sometimes it’s due to a lack of trust, ...

#oauth #springboot #springsecurity #angular

Origin | Interest | Match

We often ran into the same challenge: handling OAuth2/OIDC securely and cleanly with #SpringSecurity.

So we created XDEV SSE – a practical extension born out of real-world needs. It simplifies authentication flows, boosts security, and integrates seamlessly with Vaadin.

Check out our latest blog post on XDEV SSE! 🔐 Learn how our extension for #SpringSecurity simplifies OAuth2/OIDC handling, improves security, and integrates seamlessly with #Vaadin.

Dive into the code & discover its features: xdev.software/news

#Java #OpenSource

Just pushed support for Spring Security OAuth + Interface REST Client integration docs.spring.io/spring-secur...

#SpringFramework #SpringSecurity

Dive into the latest releases from #Spring 👉 bit.ly/4jGq7rP

GA releases of Spring Boot, Spring Security, Spring Authorization Server, Spring Session, Spring Integration, Spring for GraphQL, Spring AI and Spring Web Services.

#Java #SpringBoot #SpringSecurity #SpringAI

🚨#CVE-2025-41232: #SpringSecurity versions 6.4.0 through 6.4.5 Authorization bypass related to private method annotations using Aspects. Look for @EnableMethodSecurity(mode=ASPECTJ) and method-level security annotations on private methods. Fixed in Spring Security 6.4.6.
buff.ly/kIm4Wrd

Security testing: utility methods * Compatible with @WebMvcTest * @WithMockUser for injecting simple users * @WithUserDetailsService * SecurityMockMvcRequestPostProcessors for MockMvc(Tester) * . csrf(), .opaqueToken() , .oidcLogin() ... * ... and more!

You can tell @garnier.wf's 2-hour deep dive session on "Spring Boot Testing" was packed full of useful tips, because I didn't have any time to post anything during the session!

I took one pic to remind me about #SpringSecurity and csrf when doing `WebMvcTest`.

#DevoxxUK #SpringBoot #TestingIsGood

Dive into the latest releases from #Spring 👉 bit.ly/449pt1L

First release candidates of Spring Boot, Spring Data 2025.0.0, Spring Security, Spring Authorization Server, Spring Session, Spring Integration, Spring Modulith & Spring Web Services.

#Java #SpringBoot #SpringData #SpringSecurity

This #InfoQ article provides a detailed solution for registering & authenticating a user through a client-side #JavaScript application using the #SpringSecurity infrastructure, access & refresh tokens.

We explore the process in detail with helpful flow diagrams!

🔗 bit.ly/3PJ3YMA

#Java #Spring

Introduction to Spring Security Base Classes for Spring Security Implementation

Introduction to Spring Security - Base Classes for Spring Security Implementation #springboot #springsecurity #authentication #filter senoritadeveloper.medium.com/introduction...

Spring Boot URL Shortener Application - YouTube

#SpringBoot : Build Short URL Application

Part 7 is about securing web apps using #SpringSecurity.
Explained it in a beginner friendly way. I am sure, you are going to like it.

Stay tuned.

www.youtube.com/playlist?lis...

Dive into the latest releases from #Spring 👉 bit.ly/3QKfxUy

Spring Boot, Spring Security, Spring Authorization Server, Spring for GraphQL, Spring Integration, Spring AMQP, Spring for Apache Kafka & Spring Web Services.

#Java #SpringBoot #SpringFramework #SpringSecurity #SpringBatch #SpringModulith

Spring Security giving you headaches? 😵‍💫 Cristian Schuszter dives into OAuth2, OIDC, and custom authorization, tackling common pitfalls in Spring Security 6—with live coding! 🔥

#JAXcon #SpringSecurity #OAuth2

➡️ jax.de/performance-security/spr... ⬅️

We just broke down the Authentication Server and Resource Server setup process step-by-step with practical examples.

Swing by our blog for the complete walkthrough and more Java security content!

#SpringSecurity #OAuth2 #JavaDevelopment #Security #APIAuthentication #MicroservicesSecurity

Securing Vaadin Applications with One-Time Token Logging into an application should be simple for users but still safe and secure. Traditional logins with usernames and passwords work, but they can be inconvenient and sometimes risky if passwords ar...

Securing #Vaadin Applications with One-Time Token by @martinelli.ch

#SpringFramework #SpringSecurity

Securing Vaadin Applications with One-Time Token Logging into an application should be simple for users but still safe and secure. Traditional logins with usernames and passwords work, but they can be inconvenient and sometimes risky if passwords…

In my new blog post, "Securing Vaadin Applications With One-Time Token," I show you how to use the new Spring Security feature that enables the user to log in with a one-time token combined with Vaadin.
#Vaadin #SpringBoot #SpringSecurity