Collaborate Disseminate
I have been struggling to set up spring boot properties programmatically. I know how to set up from application.properties file.
but I would like not to use the application.properties because in my use case application properties file is … Continue reading Spring Boot, Set Up Spring Properties From Java Pojo not from application.properties [migrated]
I want to create Angular 9 + Spring Boot application with strong security complaint to PCI-DSS security standard.
Which security protocol is preferred for user sessions in order to have high security when we use Angular and Spring Boot:
… Continue reading Which Authentication mechanism to choose for PCI-DSS system
I’m building a Spring app and a React app which also contains Chat functionality. I use WebSocket with RabbitMQ as message broker.
I store the chat history as encrypted messages with AES, and before I send them to the client, I decrypt t… Continue reading Can GET Requests with Spring Rest controllers be intercepted by attackers?
I trying to implement authN/authZ for my application using Spring Security 5.2.2 and OAuth2/openid connect protocols. I use AWS Cognito as an identity provider and I’m trying to implement role-based authorization for my application.
I’ve c… Continue reading Is it correct to use AWS Cognito groups as user roles?
I trying to run my web template Spring Boot v2.1.5.RELEASE app, but when i When I go to http://localhost:8080/, I see the following:
_links
users
href “http://localhost:8080/users{?page,size,sort}”
template true
profile
href … Continue reading Spring Data Rest 2.4 doesn’t work with {?page,size,sort} links [closed]
I have implemented a StatelessFilter which checks the CSRF token in the Cookie and in the headers.
package com.leadwinner.sms.config.filters;
import java.io.IOException;
import java.util.ArrayList;
import java.util.List;
im… Continue reading Spring Security Stateless CSRF implementation in Logout
I am wanting to implement 2FA in my application. I am a relatively new developer (~1 year Spring Boot / Android).
At the moment, my App uses Spring Security AuthenticationProviders to authenticate a user only by their username/password co… Continue reading 2 Factor Authentication -> When to Request it?
I have a site located at
https://gooddomain.com/wonderful?returnPath=goodThings
which redirects me to
https://gooddomain.com/somegoodplace/goodThings
At the server side, the redirect is defined by
String path = request… Continue reading Can a user be redirected to a malicious website if only a part of the url can be controlled by user input?
I’m really confused about a CSRF token implementation in a Spring web app that I’ve inherited.
Basically, everyone can request the token by looking at what Spring Security filters do:
http
.exceptionHandling(… Continue reading Who can access the X-CSRF token?
I am trying out a Amazon like scenario where in different areas have different session timeouts and based on that user will be prompted for login if session for that particular area is expired. Like in Amazon payment info pag… Continue reading Persist Login Session in Spring Application using OAuth