hub / github.com/andifalk/reactive-spring-security-5-workshop
github.com/andifalk/reactive-spring-security-5-workshop @v2.3.1
Chat with this repo
3,272 symbols
8,296 edges
323 files
376 documented · 11%
What it actually does AI analysis from the code graph — generated when you open this
loading…
README
Reactive Spring Security 5 Workshop
This is a hands-on workshop on securing a reactive Spring Boot 2.x based web application using Spring Security 5.x.
Presentation
Topics
Topics that will be covered by this workshop are:
- Reactive Streams Programming with Project Reactor and Spring WebFlux
- OWASP Top 10 Application Security Risks 2017
- Base concepts of Spring Security 5 (i.e. Security Web Filter Chain)
- Authentication
- Authorization
- Secure password encoding and encoding upgrades
- Security Headers
- Coverage of common security challenges like
- Session fixation
- CSRF
- SQL injection
- XSS
- Automated security testing
- OAuth 2.0 and OpenID Connect 1.0
Requirements
To start the workshop you need:
- Java JDK version 8, 11 or 14
- A Java IDE (Eclipse, STS, IntelliJ, VS Code, NetBeans, ...)
- Postman, Httpie, or Curl for REST calls
- MongoDB Compass or Robo 3T to look inside the embedded MongoDB instance
- The workshop tutorial documentation (html or pdf)
- The initial reactive application to be made secure
- The REST API documentation of the initial reactive application
Please follow the setup guide to get your machine ready for this workshop.
Workshop structure
The workshop is split up into the following parts:
- Basic Security
- Lab 1: Auto Configuration
- Lab 2: Customize Authentication
- Lab 3: Add Authorization
- Lab 4: Security Testing
- OAuth 2.0 / OpenID Connect
- Lab 5: Resource Server
- Lab 6: Client
License
Apache 2.0 licensed
Copyright (c) by 2019-2020 Andreas Falk
Extension points exported contracts — how you extend this code
UserRepository (Interface)(no doc) [7 implementers]
lab-3/complete-library-server/src/main/java/com/example/library/server/dataaccess/UserRepository.java
UserRepository (Interface)
(no doc) [7 implementers]
lab-2/complete-library-server/src/main/java/com/example/library/server/dataaccess/UserRepository.java
UserRepository (Interface)
(no doc) [7 implementers]
lab-5/complete-resource-server/src/main/java/com/example/library/server/dataaccess/UserRepository.java
UserRepository (Interface)
(no doc) [7 implementers]
lab-5/initial-resource-server/src/main/java/com/example/library/server/dataaccess/UserRepository.java
UserRepository (Interface)
(no doc) [7 implementers]
lab-4/complete-library-server/src/main/java/com/example/library/server/dataaccess/UserRepository.java
UserRepository (Interface)
(no doc) [7 implementers]
lab-1/initial-library-server/src/main/java/com/example/library/server/dataaccess/UserRepository.java
UserRepository (Interface)
(no doc) [7 implementers]
lab-1/complete-library-server/src/main/java/com/example/library/server/dataaccess/UserRepository.java
CoffeeRepository (Interface)
(no doc)
intro-labs/migrate-to-reactive/initial-server-application/src/main/java/com/example/server/coffee/CoffeeRepository.java
Core symbols most depended-on inside this repo
filtercalled by 127
lab-3/complete-library-server/src/main/java/com/example/library/server/filter/LoggingWebFilter.java
toArray
called by 68
docs/js/reveal.js
create
called by 60
lab-1/initial-library-server/src/main/java/com/example/library/server/business/BookService.java
create
called by 50
lab-4/complete-library-server/src/main/java/com/example/library/server/business/BookService.java
create
called by 46
lab-5/complete-resource-server/src/main/java/com/example/library/server/business/BookService.java
create
called by 46
lab-5/initial-resource-server/src/main/java/com/example/library/server/business/BookService.java
toString
called by 42
intro-labs/reactive-playground/src/main/java/com/example/Person.java
findOneByEmail
called by 34
lab-1/complete-library-server/src/main/java/com/example/library/server/dataaccess/UserRepository.java
Shape
Languages
Java54%
TypeScript46%
Modules by API surface
docs/js/reveal.js161 symbols
docs/js/reveal.min.js129 symbols
docs/test/qunit-2.5.0.js115 symbols
lab-6/initial-oidc-client/src/main/resources/static/js/bootstrap.bundle.js96 symbols
lab-6/complete-oidc-client/src/main/resources/static/js/bootstrap.bundle.js96 symbols
intro-labs/auth-code-demo/src/main/resources/static/js/bootstrap.bundle.js96 symbols
lab-6/initial-oidc-client/src/main/resources/static/js/jquery.min.js83 symbols
lab-6/complete-oidc-client/src/main/resources/static/js/jquery.min.js83 symbols
intro-labs/auth-code-demo/src/main/resources/static/js/jquery.min.js83 symbols
intro-labs/reactive-playground/src/test/java/com/example/BasicReactivePlayground.java61 symbols
lab-6/initial-oidc-client/src/main/resources/static/js/popper.min.js52 symbols
lab-6/complete-oidc-client/src/main/resources/static/js/popper.min.js52 symbols
Datastores touched
(mongodb)Database · 1 repos
For agents
$ claude mcp add reactive-spring-security-5-workshop \
-- python -m otcore.mcp_server <graph>