Securing APIs with Spring Security & JWT
A JWT moves the session into the token itself — which buys you scale and hands you a new set of ways to get it wrong.
Feb 2, 20244 min read25
Command Palette
Search for a command to run...
#springboot
Articles tagged with #springboot
Understanding RBAC and Authorization in Spring Security
Once the system knows who you are, RBAC decides what that gets you — and roles are just strings with a convention.
Jan 29, 20243 min read21
Understanding Authentication in Spring Security
Under the hood it's five small collaborators, each doing one job — and none of them quite where beginners expect.
Jan 28, 20243 min read11How to Set Up Spring Security in Spring Boot 3.x
Add one dependency and everything's locked. The real setup is deciding what to unlock, and why.
Jan 27, 20243 min read15Understanding Spring Security: Why It Matters
Security you bolt on at the end is the security you get wrong. Spring Security's whole pitch is treating it as infrastructure instead.
Jan 24, 20243 min read16