Spring Security Tutorial

1. Spring Security Introduction

What Spring Security handles, the security filter chain, and a modern SecurityFilterChain bean example.

2. Authentication & Authorization

UserDetailsService, password encoding with BCrypt, role-based authorization, and method security with @PreAuthorize.

3. JWT with Spring Security

A complete stateless JWT authentication flow — issuing a token on login and validating it with a custom filter.

4. OAuth2 & Social Login

The OAuth2 login flow with a provider like Google, using spring-boot-starter-oauth2-client and oauth2Login().

5. CSRF, CORS & Security Headers

CSRF protection for stateful apps, CORS configuration for cross-origin frontends, and security headers like HSTS and CSP.

6. Spring Security Interview Questions

Commonly asked Spring Security interview questions with clear, practical answers.