본문 바로가기

Back-End/Spring Security11

Spring Security DI Spring Boot는 원래 깔려있다는데 나는 Spring Framework로 할 거라 추가해줘야 한다. org.springframework.security spring-security-bom {spring-security-version} pom import Spring reference에는 버전관리를 위해 spring-security-bom을 사용하라고 되어 있다. org.springframework.security spring-security-web org.springframework.security spring-security-config 미니멀하게 사용하려는 경우 위와 같이 셋팅하면 되고, 필요한 Dependencies는 docs.spring.io/spring-security/site/docs/5.. 2021. 3. 16.
Servlet Security의 Big Picture Servlet Security: The Big Picture This section discusses Spring Security’s high level architecture within Servlet based applications. We build on this high level understanding within Authentication, Authorization, Protection Against Exploits sections of the reference. 첨부터 하이레벨 아키텍쳐라고 겁을 주고 시작한다. 크게 인증, 허가, 부당이용으로부터의 보호? 라고 한다. 1. A Review of Filters Spring Security’s Servlet support is based on .. 2021. 3. 16.
Spring Security Authentication 인증이란? 5.1.2. Password Storage Spring Security’s PasswordEncoder interface is used to perform a one way transformation of a password to allow the password to be stored securely. Given PasswordEncoder is a one way transformation, it is not intended when the password transformation needs to be two way (i.e. storing credentials used to authenticate to a database). Typically PasswordEncoder is used for sto.. 2021. 3. 16.