Book Image

Learning Spring Boot 3.0 - Third Edition

By : Greg L. Turnquist
Book Image

Learning Spring Boot 3.0 - Third Edition

By: Greg L. Turnquist

Overview of this book

Spring Boot 3 brings more than just the powerful ability to build secure web apps on top of a rock-solid database. It delivers new options for testing, deployment, Docker support, and native images for GraalVM, along with ways to squeeze out more efficient usage of existing resources. This third edition of the bestseller starts off by helping you build a simple app, and then shows you how to secure, test, bundle, and deploy it to production. Next, you’ll familiarize yourself with the ability to go “native” and release using GraalVM. As you advance, you’ll explore reactive programming and get a taste of scalable web controllers and data operations. The book goes into detail about GraalVM native images and deployment, teaching you how to secure your application using both routes and method-based rules and enabling you to apply the lessons you’ve learned to any problem. If you want to gain a thorough understanding of building robust applications using the core functionality of Spring Boot, then this is the book for you. By the end of this Spring Boot book, you’ll be able to build an entire suite of web applications using Spring Boot and deploy them to any platform you need.
Table of Contents (17 chapters)
1
Part 1: The Basics of Spring Boot
3
Part 2: Creating an Application with Spring Boot
8
Part 3: Releasing an Application with Spring Boot
12
Part 4: Scaling an Application with Spring Boot

Securing Spring Data methods

Where to find this section’s code

The source code used for this portion of the chapter can be found at https://github.com/PacktPublishing/Learning-Spring-Boot-3.0/tree/main/ch4-method-security.

So far, we’ve seen tactics to apply various security provisions based on the URL of the request. But Spring Security also comes with method-level security.

While it’s possible to simply apply these techniques to controller methods, service methods, and in fact, any Spring bean’s method calls, this may appear to be trading one solution for another.

Method-level security specializes in providing a finer-grained ability to lock things down.

Updating our model

Before we can delve into this, we need an update to our domain model used earlier in this chapter. As a reminder, we created a VideoEntity class in the previous section that has an id, name, and description field.

To really take advantage of method-level security...