Master the implementation of secure authentication and authorization mechanisms in Spring Boot applications using Java. This course covers best practices for user authentication, session management, and access control to protect against common security vulnerabilities.
Overview
Syllabus
- Unit 1: Account Lockout and Enumeration Prevention
- Simulating Username Enumeration Attack
- Preventing Username Enumeration Attacks
- Simulating a Brute Force Attack
- Implementing Account Lockout Mechanism
- Unit 2: Token Authentication with Cookies
- Implementing JWT Token Expiration
- Secure JWT Tokens with HTTP-Only Cookies
- Implementing Cookie-Based Authentication Validation
- Unit 3: Token Refresh Mechanism
- Implement Refresh Token Functionality in Login Endpoint
- Implementing Token Refresh Mechanism
- Implementing Automatic Token Refresh in Client Service
- Implementing Token Revocation
- Unit 4: Session Management Best Practices
- Configuring Secure Session Cookies
- Implementing Session Timeout and Absolute Timeout
- Implement Session Rotation on Privilege Level Change