Stateless Session for multi-tenant application using Spring Security

Once upon a time, I published one article explaining the principle to build Stateless Session. Coincidentally, we are working on…

Read More »

Secure REST services using Spring Security

Overview Recently, I was working on a project which uses a REST services layer to communicate with the client application…

Read More »

Spring Security Misconfiguration

I recently saw Mike Wienser’s SpringOne2GX talk about Application Security Pitfalls. It is very informative and worth watching if you…

Read More »

CSRF protection in Spring MVC, Thymeleaf, Spring Security application

Cross-Site Request Forgery (CSRF) is an attack which forces an end user to execute unwanted actions on a web application…

Read More »

Spring from the Trenches: Invoking a Secured Method from a Scheduled Job

Let’s assume that we have implemented a Spring powered application, and secured it by using the method security expressions of…

Read More »

Spring Security – Behind the scenes

Security tasks such as authentication of user and authorization of a user to view application resources are usually handled by…

Read More »

Getting Started with method security in Grails using Spring Security

This blog post will be about implementing method level security with security expressions in Grails using the Spring Security plugins.…

Read More »

Grails: Calling bean methods in Spring Security expressions

Some days ago while working on a Grails application I was in a situation where a wanted to call a…

Read More »

su and sudo in Spring Security applications

Long time ago I worked on a project that had a quite powerful feature. There were two roles: user and…

Read More »