Loading
Topic
Spring Security request flow, authentication, authorization, sessions, tokens, exploit protection, and practical Spring testing strategy.
Practice items tagged with Spring Security & Testing.
Finds failures hidden by test-owned transactions, automatic rollback, open persistence contexts, missing flushes, and separate server threads.
Separates authentication orchestration, mechanism-specific verification, and username-based user lookup.
Traces a Servlet request through the security proxy, selected filter chain, authentication, context, authorization, and exception handling.
Improves suite speed by reusing stable application contexts and avoiding configuration variation, unnecessary dirtiness, and process forks.
Explains first-match chain selection, rule matching inside a chain, ordering, fallback coverage, and accidental unprotected paths.
Treats GrantedAuthority as the common representation while explaining role prefixes, scope mapping, and domain permission design.