This module explores how to implement client certificate authentication using TLS in Spring Security. Learners will configure trust stores, import certificates, and understand how Spring Security processes certificate information for secure identity verification. The module also covers supporting dual-mode authentication environments.

This module introduces the fundamentals of OAuth 2, including how to set up authentication with popular providers and integrate it with Spring Security. Learners will explore customizing login experiences and managing user sessions securely using OpenID Connect. By the end, you'll be able to implement and test OAuth 2 authentication flows in your applications.

This module introduces the fundamentals of integrating SAML 2 authentication with Spring Security, including an overview of SAML login flows and metadata management. Learners will explore how to customize SAML metadata response handling using Spring components. Practical configuration techniques for adapting relying party registration are also covered.

This module explores advanced authorization techniques in Spring Security, focusing on method-level security, proxy types, and in-page access controls. Learners will discover how to implement conditional rendering, configure authorization rules, and secure business logic using annotations and role-based filtering. By the end, you'll be able to apply fine-grained access control strategies to protect sensitive application functionality.

This module guides learners through the implementation and optimization of Spring Security Access Control Lists (ACLs) for fine-grained authorization in Java applications. You will explore database integration, permission modeling, and performance considerations, as well as learn how to customize and extend ACL functionality for real-world scenarios.

This module guides learners through implementing custom authorization mechanisms in Spring Security, including creating database-backed SecurityMetadataSources, custom SpEL expressions, and dynamic PermissionEvaluators. Learners will explore how to modify access decision logic and configure advanced access control for both web and method security. By the end, participants will understand how to tailor authorization strategies to meet complex application requirements.