Spring Security In Action Second Edition [top]

With the rise of Spring WebFlux, the book provides deeper coverage of securing non-blocking applications. Key Themes Explored 1. The Architecture of Defense

<http> <authorize> <antMatchers "/admin/**">hasRole("ROLE_ADMIN")</antMatchers> <antMatchers "/user/**">hasRole("ROLE_USER")</antMatchers> </authorize> </http> spring security in action second edition

: Offers deep, practical coverage on building your own authorization server, configuring resource servers, and managing client logins. With the rise of Spring WebFlux, the book

This works, but it breaks in distributed systems. If you have two instances of your app behind a load balancer, user A logging into Instance #1 must send their next request to Instance #1. That is , and it is an anti-pattern for resilience. With the rise of Spring WebFlux

@PreAuthorize("hasRole('ROLE_USER')") public void userMethod() // ...