Massig neue Features in Spring Security 3 · Neu in Spring Security 3.2 • Servlet 3 und 3.1...

13
© Copyright 2014 Pivotal. All rights reserved. © Copyright 2014 Pivotal. All rights reserved. 1 Massig neue Features in Spring Security 3.2 Mike Wiesner, Pivotal [email protected]

Transcript of Massig neue Features in Spring Security 3 · Neu in Spring Security 3.2 • Servlet 3 und 3.1...

Page 1: Massig neue Features in Spring Security 3 · Neu in Spring Security 3.2 • Servlet 3 und 3.1 Integration • Concurrency Unterstützung • Spring MVC Integration • Basic CSRF

© Copyright 2014 Pivotal. All rights reserved.© Copyright 2014 Pivotal. All rights reserved. !1

Massig neue Features in Spring Security 3.2Mike Wiesner, Pivotal [email protected]

Page 2: Massig neue Features in Spring Security 3 · Neu in Spring Security 3.2 • Servlet 3 und 3.1 Integration • Concurrency Unterstützung • Spring MVC Integration • Basic CSRF

© Copyright 2014 Pivotal. All rights reserved. !2

Mike Wiesner

• Principal Technical Instructor @Pivotal • 13 Jahre Java Enterprise Erfahrung • 8 Jahre Spring Erfahrung • Fokus: Application Security, Enterprise

Integration !

• [email protected]

Page 3: Massig neue Features in Spring Security 3 · Neu in Spring Security 3.2 • Servlet 3 und 3.1 Integration • Concurrency Unterstützung • Spring MVC Integration • Basic CSRF

© Copyright 2014 Pivotal. All rights reserved.

Page 4: Massig neue Features in Spring Security 3 · Neu in Spring Security 3.2 • Servlet 3 und 3.1 Integration • Concurrency Unterstützung • Spring MVC Integration • Basic CSRF

© Copyright 2014 Pivotal. All rights reserved.

BUILT FOR THE SPEED OF BUSINESS

Application Security?

Page 5: Massig neue Features in Spring Security 3 · Neu in Spring Security 3.2 • Servlet 3 und 3.1 Integration • Concurrency Unterstützung • Spring MVC Integration • Basic CSRF

© Copyright 2014 Pivotal. All rights reserved.

Enterprise Java = Spring ;-)

!

Spring + Security

=

Spring Security

Page 6: Massig neue Features in Spring Security 3 · Neu in Spring Security 3.2 • Servlet 3 und 3.1 Integration • Concurrency Unterstützung • Spring MVC Integration • Basic CSRF

© Copyright 2014 Pivotal. All rights reserved. !6

Spring Security

• Authentifizierung und Autorisierung • Unterstützung gegen gängige Angriffe • Servlet API Unterstützung • Spring MVC Integration (optional) • Flexible Laufzeitumgebungen

Page 7: Massig neue Features in Spring Security 3 · Neu in Spring Security 3.2 • Servlet 3 und 3.1 Integration • Concurrency Unterstützung • Spring MVC Integration • Basic CSRF

© Copyright 2014 Pivotal. All rights reserved. !7

Neu in Spring Security 3.2

• Servlet 3 und 3.1 Integration • Concurrency Unterstützung • Spring MVC Integration • Basic CSRF Schutz • Security Headers • Java Configuration (anstatt XML)

Page 8: Massig neue Features in Spring Security 3 · Neu in Spring Security 3.2 • Servlet 3 und 3.1 Integration • Concurrency Unterstützung • Spring MVC Integration • Basic CSRF

© Copyright 2014 Pivotal. All rights reserved.

Noch wach?

Page 9: Massig neue Features in Spring Security 3 · Neu in Spring Security 3.2 • Servlet 3 und 3.1 Integration • Concurrency Unterstützung • Spring MVC Integration • Basic CSRF

© Copyright 2014 Pivotal. All rights reserved.

Demo Time!

Page 10: Massig neue Features in Spring Security 3 · Neu in Spring Security 3.2 • Servlet 3 und 3.1 Integration • Concurrency Unterstützung • Spring MVC Integration • Basic CSRF

© Copyright 2014 Pivotal. All rights reserved. !10

Java Config Defaults

• Neue (bessere) defaults: • GET /login vs. /spring_security_login • POST /login vs. /j_spring_security_check • username vs. j_username • password vs. j_password !

• Information hiding

Page 11: Massig neue Features in Spring Security 3 · Neu in Spring Security 3.2 • Servlet 3 und 3.1 Integration • Concurrency Unterstützung • Spring MVC Integration • Basic CSRF

© Copyright 2014 Pivotal. All rights reserved. !11

Java Config

• Transparenter • Flexibler • JavaDoc • Eigene Security DSL möglich

Page 12: Massig neue Features in Spring Security 3 · Neu in Spring Security 3.2 • Servlet 3 und 3.1 Integration • Concurrency Unterstützung • Spring MVC Integration • Basic CSRF

© Copyright 2014 Pivotal. All rights reserved.

BUILT FOR THE SPEED OF BUSINESS

���12

Mike Wiesner [email protected] http://bit.ly/JL_SpringSec

Page 13: Massig neue Features in Spring Security 3 · Neu in Spring Security 3.2 • Servlet 3 und 3.1 Integration • Concurrency Unterstützung • Spring MVC Integration • Basic CSRF

© Copyright 2014 Pivotal. All rights reserved.

BUILT FOR THE SPEED OF BUSINESS

!13


E:PUBLISH 2013Status Quo – ePUB 3.0 Unterstützung im Markt

E:PUBLISH 2013Status Quo – ePUB 3.0 Unterstützung im Markt

Ribbon Benutzeroberfläche / UI SharePoint Workspace SharePoint Mobile Office Client und Office Web App Integration Unterstützung von Standards.

Ribbon Benutzeroberfläche / UI SharePoint Workspace SharePoint Mobile Office Client und Office Web App Integration Unterstützung von Standards.

events & APIs: microservices, What’s next? Integration with · Spring Integration JBoss ecosystem Spring XD, Spring Integration Kafka Former Spring Cloud Stream project lead Co-author

events & APIs: microservices, What’s next? Integration with · Spring Integration JBoss ecosystem Spring XD, Spring Integration Kafka Former Spring Cloud Stream project lead Co-author

Eyetracking als Ressource zur Unterstützung des Inter ...preview).pdf · Eyetracking als Ressource zur Unterstützung des Inter-aktionsmanagements in synchroner Schriftkommunikation

Eyetracking als Ressource zur Unterstützung des Inter ...preview).pdf · Eyetracking als Ressource zur Unterstützung des Inter-aktionsmanagements in synchroner Schriftkommunikation

Atlanta JUG - Integrating Spring Batch and Spring Integration

Atlanta JUG - Integrating Spring Batch and Spring Integration

Spring Web Service, Spring Integration and Spring Batch

Spring Web Service, Spring Integration and Spring Batch

Solace JMS Integration with Spring Framework v4solace.com/.../resources/Solace-JMS-Integration-with-Spring-v4.0.pdfSolace JMS Integration with Spring Framework v4.0 4 2 Why Solace

Solace JMS Integration with Spring Framework v4solace.com/.../resources/Solace-JMS-Integration-with-Spring-v4.0.pdfSolace JMS Integration with Spring Framework v4.0 4 2 Why Solace

Spring Integration Hazelcast Extension

Spring Integration Hazelcast Extension

Spring Integration Java DSL

Spring Integration Java DSL

Spring Integration Reference Manual - Spring … · Spring Integration Reference Manual 5.0.6.RELEASE Spring Integration iii Table of Contents I. Preface ..... 1

Spring Integration Reference Manual - Spring … · Spring Integration Reference Manual 5.0.6.RELEASE Spring Integration iii Table of Contents I. Preface ..... 1

Visual Age und Rational Rose Daniel Faensen. 2 Übersicht Integration Rational Rose und VisualAge (Forward / Reverse Engineering) Team-Unterstützung.

Visual Age und Rational Rose Daniel Faensen. 2 Übersicht Integration Rational Rose und VisualAge (Forward / Reverse Engineering) Team-Unterstützung.

MongoDB & Spring MVC Integration

MongoDB & Spring MVC Integration

«Spring Integration as Integration Patterns Provider»

«Spring Integration as Integration Patterns Provider»

Spring Integration Reference Manual...Spring Integration 3.0.1.RELEASE Spring Integration Reference Manual ix 20.4. Email Message Filtering ..... 241 20.5. Transaction

Spring Integration Reference Manual...Spring Integration 3.0.1.RELEASE Spring Integration Reference Manual ix 20.4. Email Message Filtering ..... 241 20.5. Transaction

Enterprise Integration Patterns na nuvem com Spring Integration

Enterprise Integration Patterns na nuvem com Spring Integration

Spring IntegrationSpring Integration Part 2 - Core Servletscourses.coreservlets.com/Course-Materials/pdf/spring/10-spring-int... · Spring IntegrationSpring Integration Part 2 Originals

Spring IntegrationSpring Integration Part 2 - Core Servletscourses.coreservlets.com/Course-Materials/pdf/spring/10-spring-int... · Spring IntegrationSpring Integration Part 2 Originals

Spring Madrid User Group - Spring Integration in Action

Spring Madrid User Group - Spring Integration in Action

Spring Integration Splunk

Spring Integration Splunk

Spring IntegrationSpring Integration Part 1 - Core Servletscourses.coreservlets.com/Course-Materials/pdf/spring/09-spring-int... · Spring IntegrationSpring Integration Part 1 ...

Spring IntegrationSpring Integration Part 1 - Core Servletscourses.coreservlets.com/Course-Materials/pdf/spring/09-spring-int... · Spring IntegrationSpring Integration Part 1 ...

Spring Integration Part 1

Spring Integration Part 1