Secure All The Things
The definitive guide to mastering Spring Security, OAuth, and the Spring Authorization Server.
By Josh Long
The definitive guide to mastering Spring Security, OAuth, and the Spring Authorization Server.
By Josh Long
Security isn't a feature you bolt on at the end; it's the foundation of every robust application. In Secure All The Things, Spring Developer Advocate Josh Long takes you on a comprehensive journey through the modern Java security landscape.
Whether you're building traditional monolithic web applications, dynamic single-page applications, distributed microservices, or bleeding-edge native binaries, this book equips you with the tools and knowledge to secure them all.
You'll start with the fundamentals of Spring Security and progressively tackle advanced concepts like OAuth2, Passkeys, Multi-Factor Authentication (MFA), and deploying a production-ready Spring Authorization Server. Learn to implement robust security across web boundaries, messaging protocols, gRPC, GraphQL, and even desktop JavaFX apps.
Master the core concepts of Java, Dependency Injection, Spring Boot, and Spring Security.
Implement robust user authentication spanning Passwords, Magic Links, Passkeys, and MFA.
Deep dive into OAuth2, granular authorization rules, and federated identity.
Build, implement, and persist your own production-grade identity provider.
Apply security patterns across Web interfaces, JavaFX desktop apps, and Shell environments.
Lock down gRPC, SOAP, Model Context Protocol (MCP), distributed messaging, and multi-tenant architectures.