Authorization in Spring Security - Permissions, Roles and Beyond

Explore advanced authorization patterns and mechanisms in Spring Security through this comprehensive conference talk that goes beyond basic role-based access control. Learn how to architect secure and robust authorization systems for Spring Boot applications by understanding the multi-phase approach to authorization implementation. Discover how to properly extract, transform, and store user information during the initial login phase, including handling OpenID claims and user data. Master the concepts of policy decision and policy enforcement within operational contexts, understanding where and how authorization decisions should be made in your application architecture. Examine various access control patterns available in Spring Security and gain practical insights into different authorization mechanisms and their respective tradeoffs. Build a solid foundational understanding of authorization architecture through live-coded examples that demonstrate real-world implementation strategies for complex security use-cases beyond simple hasRole() implementations.