Home / Spring Boot / Security

Security

Spring Security basics, internals, JWT and refresh tokens.

Spring Security BasicsSpring Security protects your application.Spring Security Internals: Authentication Flow, Custom Filters, Multiple ChainsTo debug 401 and 403 errors and write custom security you must know what happens inside the filter chain.JWT and OAuth2 Resource ServerFor REST APIs the common approach is stateless authentication with JSON Web Tokens (JWT).JWT Access and Refresh Token Flow (Complete Design)Short-lived access tokens are safe but annoying, long-lived tokens are convenient but dangerous.