Getting Started with Spring Authorization Server

September 22, 2021

The Spring Authorization Server project provides support for OAuth 2.1 Authorization Framework, OpenID Connect Core 1.0, and the numerous extension specifications. The primary goal of this talk is to demonstrate how to securely configure a Spring Authorization Server deployment using identified trust boundaries. The IETF draft, OAuth 2.0 Security Best Current Practice, will be referenced and recommendations will be provided for preventing attacks and implementing mitigations using defensive, in-depth strategies. The following will be discussed and demonstrated: - Current features - Starting up with default configuration - Customizing the configuration - Adding custom features via extension - Feature roadmap Joe Grandja, Spring Security Engineer at VMware Steve Riesenberg, Software Engineer at VMware Slides: https://www.slideshare.net/Pivotal/getting-started-with-spring-authorization-server

Previous
Spring Data JDBC: Beyond the Obvious
Spring Data JDBC: Beyond the Obvious

Spring Data JDBC is an ORM inspired by Domain Driven Design. It purposely limits the ways you can model you...

Next Video
Spring GraphQL
Spring GraphQL

GraphQL is a relatively new but well-established alternative to REST for exposing web APIs that is rapidly ...