Why Spring

Overview Microservices Reactive Event Driven Cloud Web Applications Serverless Batch

Learn

Overview Quickstart Guides Blog

Projects

Overview Spring Boot Spring Framework Spring Cloud Spring Cloud Data Flow Spring Data Spring Integration Spring Batch Spring Security View all projects Spring Tools 4 Spring Initializr

Training Support

Community

Overview Events Team

Dark Theme

Spring Security

- Prerequisites
- Community
- What’s New
- Getting Spring Security
- Features
  - Authentication
    - Password Storage
  - Protection Against Exploits
- Project Modules and Dependencies
- Samples
- Servlet Applications
  - Getting Started
  - The Big Picture
  - Authentication
    - Authentication Architecture
    - Username/Password
      - Reading Username/Password
        
        Form
        
        Form
        
        Digest
      - Password Storage
        
        In Memory
        
        JDBC
        
        UserDetails
        
        UserDetailsService
        
        PasswordEncoder
        
        DaoAuthenticationProvider
        
        LDAP
    - Session Management
    - Remember Me
    - OpenID Support
    - Anonymous
    - Pre-Authentication
    - JAAS
    - CAS
    - X509
    - Run-As
    - Logout
    - Authentication Events
  - Authorization
  - OAuth2
  - SAML 2
  - Protection Against Exploits
  - Integrations
  - Configuration
  - Testing
    - Testing Method Security
    - Spring MVC Test Integration
  - Cryptography
  - Appendix
- Reactive Applications
  - WebFlux Security
  - Project Against Exploits
  - OAuth2
  - X.509
  - WebClient
  - EnableReactiveMethodSecurity
  - CORS
  - Testing
  - RSocket

Spring Security 5.5

Spring Security
- 5.6
- 5.5
Spring Session
- 2.6

Spring Security
Servlet Applications
Protection Against Exploits

5.6 5.5

There is a newer version available. Please update to Spring Security 5.6!

Protection Against Exploits

This section discusses protection against servlet exploits.

© VMware, Inc. or its affiliates. Terms of Use • Privacy • Trademark Guidelines • Thank you • Your California Privacy Rights • Cookie Settings

Apache®, Apache Tomcat®, Apache Kafka®, Apache Cassandra™, and Apache Geode™ are trademarks or registered trademarks of the Apache Software Foundation in the United States and/or other countries. Java™, Java™ SE, Java™ EE, and OpenJDK™ are trademarks of Oracle and/or its affiliates. Kubernetes® is a registered trademark of the Linux Foundation in the United States and other countries. Linux® is the registered trademark of Linus Torvalds in the United States and other countries. Windows® and Microsoft® Azure are registered trademarks of Microsoft Corporation. “AWS” and “Amazon Web Services” are trademarks or registered trademarks of Amazon.com Inc. or its affiliates. All other trademarks and copyrights are property of their respective owners and are only mentioned for informative purposes. Other names may be trademarks of their respective owners.