<rss xmlns:atom="http://www.w3.org/2005/Atom" version="2.0">
    <channel>
        <title>Spring - Tag - Eric Armbruster</title>
        <link>http://example.org/tags/spring/</link>
        <description>Spring - Tag - Eric Armbruster</description>
        <generator>Hugo -- gohugo.io</generator><language>en</language><managingEditor>eric.armbruster@tum.de (Eric Armbruster)</managingEditor>
            <webMaster>eric.armbruster@tum.de (Eric Armbruster)</webMaster><lastBuildDate>Tue, 29 Mar 2022 14:56:13 &#43;0200</lastBuildDate><atom:link href="http://example.org/tags/spring/" rel="self" type="application/rss+xml" /><item>
    <title>Spring Security</title>
    <link>http://example.org/posts/spring-security/authorization/</link>
    <pubDate>Tue, 29 Mar 2022 14:56:13 &#43;0200</pubDate>
    <author>Eric Armbruster</author>
    <guid>http://example.org/posts/spring-security/authorization/</guid>
    <description><![CDATA[Fine-Grained Authorization with Spring Boot Spring offers many methods for checking authorization. In this short blog post I will focus on checking authorization at method-level and at the level of individual users.
Method-Level Authorization First, we need to enable @PreAuthorize and @PostAuthorize annotations which are required for checking method-level security, by adding @EnableGlobalMethodSecurity(prePostEnabled = true) to a @Configuration bean that extends GlobalMethodSecurityConfiguration [1].
@Configuration @EnableGlobalMethodSecurity(prePostEnabled = true) public class MethodSecurityConfig extends GlobalMethodSecurityConfiguration { } Role checking with @PreAuthorize Now we can make use of Spring Security&rsquo;s DSL to check whether the roles are fulfilled at individual methods:]]></description>
</item>
<item>
    <title>Spring Security</title>
    <link>http://example.org/posts/spring-security/authentication/</link>
    <pubDate>Mon, 28 Mar 2022 18:14:37 &#43;0200</pubDate>
    <author>Eric Armbruster</author>
    <guid>http://example.org/posts/spring-security/authentication/</guid>
    <description><![CDATA[Securing a Spring Boot Web Application Recently I had the chance to work on the authentication and authorization mechanisms for a simple Delivery application that we had to build in the Advanced Topics of Software Engineering class at TUM. This post is intended merely as a write-up of the most important steps that were required to fulfill the task. As a consequence, not everything here will be according to best practices.]]></description>
</item>
</channel>
</rss>
