Spring Security Core: Beginner to Guru (Udemy.com)

I enjoyed this course. I found it a big challenge as I updated everything to current versions of the libraries which in some cases changed considerably. But John's explanations of what he was teaching was a great road map for my studies. I really liked the in depth explanations, and digging into aspects of spring security I was only marginally aware of before this course.

I liked most of this course. Especially the coverage on 2FA and RememberMe. The principles taught were sound. I did have some difficulties getting this to work on Spring-Boot-3. The sample repository was still using version 2. This caused a number of bugs that needed to be addressed while working alongside the project. Getting the bugs wrinkled out on my own definitely helped my understanding of things. But it added a lot more time in the course than I had expected. Other than the outdated Spring version, the only other wishlist items not fulfilled were the lack of any coverage of JWT and OAuth. I feel these are vital topics for security nowadays, and there was no coverage of them at all. Hopefully, this course will be updated at some later date to cover these topics.

This is a great introduction to Spring Security, covering a wide range of topics to bring some familiarity to developers who can take it farther on their own. A student, after taking this class, will have a *much* easier time reading spring docs and other sources discussing Spring Security. There will be some catching up to do as this (as of this writing) is using Spring Framework 5.3.2 and the Spring Framework is on 6.x and actually has sections in their documentation for preparing for the move to version 7. Nevertheless, this course is well worth it for the familiarity it brings with the concepts and how the pieces impact each other.

This course on Udemy is exceptional! It is well-structured, presented with excellence, and provides a thorough understanding of the subject matter. The instructor's knowledge and teaching style are commendable. I am particularly interested in learning more about OAuth2(Spring OAuth2 authorization server, client-server, and resource server), and JWT token. I believe this course would be an excellent resource for that. I highly recommend this course to anyone seeking to gain valuable skills in the topic and beyond

I'll echo what a lot of other students are saying here - he talks fast, swallows some words, and bombards you with a ton of information. In a classroom setting, these would be deal breakers, but in a video that you can rewatch, rewind, or pause, it's not a problem. He clearly knows his stuff. I appreciate that he leaves the errors in there and uses them as a teaching moment. I got everything I needed (and more) from this course, and will be taking more from his catalog in the future. All in all, I really don't think there's anything better out there.

John explains the principles so well. I needed a good grounding in setting up security in Spring and and after this course that's been achieved. As with other courses John does he always adds in extra useful stuff too. Like the use of the warrenstrange google auth library and the use of a spring generic filter.

John is a very skilled Java developer, I learned new things about this branch of Spring's big environment. What I enjoyed the most was the 2fa and locking timestamps for unsuccessful attempts. Definitely recommend this course.

This course is simply outstanding. It gives you a very strong understanding of Spring Security, from the basics to more advanced stuff. You need a big of understanding of Java / Spring framework before doing this course though. I highly recommend this course. Believe me, I started doing John's courses around 4 years ago, and not only I managed to secure a job as a junior developer, but today I have a senior role, leading 2 projects and training junior/mid level, sometimes seniors and tech lead. If you're new, start with Spring Framework 5, then an essential course on Testing using Junit and Mockito. This is already a LOT. Then you can either dive in this course, or his masterpiece (imho): Spring Boot Microservices. Also it would help the course on Maven and Docker. Trust a fellow student: John's courses won't disappoint you and can (to be read as: WILL) boost your career progression and knowledge. Question for the teacher: John is there any ETA for the final sections?

Oauth2 (Preferably with KeyCloak), SAML2 and a similar implementation with Reactive (webflux) would be nice. Also best practives for communiting between backend securiy api and single page web pages (ReactJs) - which one is better in terms of security? Is it JWT, is it PASETO, is it session cookie based?) Security implementation with webflux is a bit similar but since it is relatively new, it is very fragile. It would be gret to get an example from an expert.

This is an Excellent Course. Course gives you all Information about Security and shows you how to implement Security using Spring. I have the following recommendations for the course In our Organization, authentication is done through another application and a token is given to us(Spring Application) Authentication application does Two Factor Authentication. I think in most organizations, Spring may not do Two Factor Authentication. Most developers may not need this, I suggest giving this information at the beginning of this section, so that developers can skip this section. I suggest adding another section to explain how token can be validated from another application.