|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/spring-security-login-logout-with-spring-boot-web-project/
课程评论：没有评论
课程名称：使用JPA和Spring Security构建Spring Boot Web应用程序 课程概述： 本课程旨在指导学生如何使用Spring Boot Web应用程序，以简单的方式开发登录和注销功能，结合Spring Security。学生将学习关键概念的实现，包括注册、登录、注销、找回密码、重置密码及向用户发送重置密码邮件等。该课程采用的是Spring Security 6、Spring Boot及MySQL数据库。 课程特点： - Spring Security是一个强大且高度可定制的身份验证和访问控制框架，是保护基于Spring的应用程序的事实标准。 - 该框架专注于为Java应用程序提供身份验证和授权的功能，并且它的扩展性使得开发者能够轻松满足自定义需求。 功能亮点： - 对身份验证和授权的全面和可扩展支持。 - 防护措施，抵御会话固定、点击劫持、跨站请求伪造等攻击。 - Servlet API集成及与Spring Web MVC的可选集成。 开发特色： - 软件安装。 - 从零开发Spring Boot Web项目。 - 使用Bootstrap创建Spring Boot Web应用程序。 - 创建登录、注销、注册、找回密码及更改密码的网页。 - 轻松理解Spring Security及身份验证和授权的概念。 - 理解CSRF攻击及其对Web应用程序的危害。 - 创建用户和角色，并实现用户与角色之间的多对多关系。 - 创建Spring Security自定义配置类。 - 基于静态用户凭证实现登录应用，基于数据库凭证登录的实现。 - 通过Ajax调用验证用户是否存在数据库。 - 找回密码的实现及向用户发送带有重置密码链接的邮件。 - 重置密码网页和修改密码网页的实现等。 本课程为希望掌握Spring Boot与Spring Security的学生提供了详尽的指导和实用技能，适合各层次的开发者参与学习。
In this course students can learn how to develop login and logout feature with spring security by using spring boot web application in easy way. Key concepts implementation:Sign Up, login, logout, forgot password, reset password, sending an email to user to reset the password, change password implementation (Spring security 6 + spring boot + MySQL database)Spring Security is a powerful and highly customizable authentication and access-control framework. It is the de-facto standard for securing Spring-based applications.Spring Security is a framework that focuses on providing both authentication and authorization to Java applications. Like all Spring projects, the real power of Spring Security is found in how easily it can be extended to meet custom requirementsFeaturesComprehensive and extensible support for both Authentication and AuthorizationProtection against attacks like session fixation, clickjacking, cross site request forgery, etcServlet API integrationOptional integration with Spring Web MVCAuthentication:Spring Security provides comprehensive support for authentication. Authentication is how we verify the identity of who is trying to access a particular resource. A common way to authenticate users is by requiring the user to enter a username and password. Once authentication is performed we know the identity and can perform authorization.Spring Security provides built-in support for authenticating users. This section is dedicated to generic authentication support that applies in both Servlet and WebFlux environments. Refer to the sections on authentication for Servlet and WebFlux for details on what is supported for each stack.Authorization:Spring Security provides comprehensive support for authorization. Authorization is determining who is allowed to access a particular resource. Spring Security provides defense in depth by allowing for request based authorization and method based authorization.Development features:Software installation.Spring boot web project development from scratch.Bootstrap spring boot web application.Create Login and Logout , registration, forgot password, change password web pages in easy way.Understand spring security in easy way.Understand Authentication and Authorization.Understand CSRF attack and how attackers can hack web application.Create User and Roles.Implement Many to Many relationship between user and roles.Create spring security custom configuration class.login application by using static user credentials.login application by using credentials from databaseAjax calls to validate user exist in database or not.Forgot password implementation.Send email with reset password link to end user.Reset Password web page implementation.Change password web page implementation and e.t.c.
