This chapter explains how to secure and test your Spring Boot backend. We will use the database application that we created in the previous chapter as a starting point.
In this chapter, we will look into the following:
The Spring Boot application that was created in previous chapters is necessary.
Spring Security (https://spring.io/projects/spring-security) provides security services for Java-based web applications. The Spring Security project started in 2003 and was previously named The Acegi Security System for Spring.
By default, Spring Security enables the following features:
AuthenticationManager bean with an in-memory single user. The username is user and the password is printed to the console output./css, /images, and more.ApplicationEventPublisher.You can include Spring Security in your application by adding the following dependency to the pom.xml file:
<dependency> <groupId>org.springframework.boot</groupId> <artifactId...
In this chapter, we focused on securing and testing the Spring Boot backend. Securing was first done with Spring Security. The frontend will be developed with React in upcoming chapters; therefore, we implemented JWT authentication, which is a lightweight authentication method suitable for our needs. We also covered the basics of testing a Spring Boot application. We used JUnit for unit testing and implemented test cases for JPA and RESTful web service authentication. In the next chapter, we will setup the environment and tools for the frontend development.
Packt has other great resources for learning about Spring Security and Testing:
© 2018 Packt Publishing Limited All Rights Reserved
