Book Image

Spring Security Essentials

By : Nanda Nachimuthu
Book Image

Spring Security Essentials

By: Nanda Nachimuthu

Overview of this book

<p>Spring Security is a framework that focuses on providing both authentication and authorization to Java applications. Like all Spring projects, the real power of Spring Security is how easily it can be extended to meet custom requirements. The popularity of the Spring framework is increasing and the security package of Spring addresses vast mechanisms of Security in a rich way. Due to an increasing number of applications for various business needs, the integration of multiple applications is becoming inevitable. The standard security procedures available across multiple implementations in Spring will protect vulnerable applications that are open to larger public and private audiences.</p> <p>Spring Security Essentials focuses on the need to master the security layer, which is an area not often explored by a Spring developer.</p> <p>At the beginning, we’ll introduce various industry standard security mechanisms and the practical ways to integrate with them. We will also teach you about some up-to-date use cases such as building a security layer for RESTful web services and applications.</p> <p>The IDEs used and security servers involved are briefly explained, including the steps to install them. Many sample projects are also provided to help you practice your newly developed skills. Step-by-step instructions will help you master the security layer integration with the Server, then implement the experience gained from this book in your own real-time application.</p>
Table of Contents (17 chapters)
Spring Security Essentials
Credits
About the Author
About the Reviewer
www.PacktPub.com
Preface
Index

Spring Security with SAML classes


In this section, we will look at the Spring Security SAML package. The classes in this package extend the Spring Security core classes that are responsible for SAML authentication, authorization, and logout:

  • SAMLAuthenticationProvider: This is capable of verifying the validity of a SAMLAuthenticationToken, and in case the token is valid, creates an authenticated UsernamePasswordAuthenticationToken.

  • SAMLAuthenticationToken: This is used to pass the SAMLContext object through to the SAML authentication provider.

  • SAMLBootstrap: This is the initialization for the SAML library.

  • SAMLConstants: These are the constant values for the SAML module.

  • SAMLCredential: An object is a storage for entities parsed from the SAML 2.0 response during its authentication.

  • SAMLDiscovery: A filter implements the Identity provider Discovery Service Protocol and Profile, as defined in http://docs.oasis-open.org/security/saml/Post2.0/sstc-saml-idp-discovery.pdf.

  • SAMLEntryPoint: A class...