|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/spring-mvc-and-security-insights/
课程评论：没有评论
**课程名称：Spring MVC与安全精要**
**课程概述：**
本课程分为两大核心部分：Web应用开发与安全实现。
**Web应用部分：**
* **基础配置：** 从DispatcherServlet的基础配置入手，学习其工作原理，包括如何拦截传入请求并将数据传递给Model进行处理。
* **控制器开发：** 创建第一个Spring MVC控制器，深入理解@RequestParam和@PathVariable注解的使用。
* **多上下文配置：** 学习如何配置应用程序的多个Web应用上下文（Web Application Context）和根上下文（Root Context），并通过XML和Java配置两种方式进行实践。
**安全实现部分：**
* **基础安全：** 实现基本的Spring安全，包括使用默认登录表单。
* **认证与授权：** 深入学习认证提供者（Authentication Provider）、认证管理器（Authentication Manager）及其在项目中的应用。
* **自定义登录：** 创建自定义登录表单，并学习使用`
Basically the course is divided into 2 major sectionsWeb partSecurity part. We are going to start off by making a basic spring mvc web application, and will learn how to apply security to different parts of the application.Then we are going to add on the more advanced features inside application i.e. configuration of multiple web application context inside application plus implementation of DAO authentication provider inside our application, and than we are going to explore how to integrate and implement OAuth2 features inside our applicationIt's a super hands on course. My goal at this course is to get you through the entire process of configuring and implementing security inside a spring projectWebIn the web section of this course, we are going to start off with most basic configurations of the DispatcherServlet then we are going to create our first controller, and will look into functionalities that how controller component Intercepts incoming requests plus how it sends the data to Model for further processing then we are going to explore request param, and pathvariable annotations plus we are also going to explore how to configure multiple web application context, and root context. We are going to do all these steps both via xml configurations and java configurationsSecurity - BasicsIn Security-Basics section of this course, we are going to explore how to implement the basic security with a default login form. Later in the section, we are going to explore authentication provider, authentication managers, and we are going to use them inside our project. We are also going to create our own customize login form then we are going to use authenticate and authorize tag inside our application to implement how to display contents based on the assigned authoritiesJava ConfigurationsIn Java configurations section of this course, we are going to explore, how to configure the ServletContext programmatically instead of configuring it via web.xml. Later in the section, We are going to integrate our application with DaoAuthenticationProvider to use user names, and roles configured in database tablesSpring bootIn Spring boot section of this course, we are going to migrate our application to spring bootSpring OAuth2In Spring OAuth2 section of this course, we are going to explore OAuth2 plus we are also going to explore how to customize application to use OAuth2 for authorization mechanism, and we are going to use Google and GitHub as the authentication provider. We are going to start off by configuring our application to use google and github as the authentication Provider's with the default oAuth2Login form. Later we are going to customize login page for the authentication providers then we are going to explore how to use UserInfo endpoint to access the claims of the authenticated end-user plus we are also going to explore explore standard OAuth 2.0 Provider's implementation of OAuth2UserService plus the implementation of OAuth2UserService with OpenIDConnect ,and lastly, we are going to explore how to map the authorities of the user for the provider having standard OAuth2 implementation, and Open id connect implementation
