Spring Security Zero to Master along with JWT,OAUTH2 (Udemy.com)

I have learned a lot of new things about the framework things that i couldn't find else where in YouTube or other areas, While i sometimes struggled with the accent the information was still delivered even if took a bit more, while i certainly didn't get out of the course understanding everything 100% this not the course's fault but mine as i need to implement more to understand, one nit pick some sections had problems were i would get tired of a 6m lecture cause either the topic didn't seem that much interesting or that the section wasn't that interactive i would hope later courses add a part in the section were we implement something in the project all alone it could be different implementations of a feature a new feature completely or problem in project deliberately left for us to try and solve and then a lecture for guidance on how it should be done so i as a student can feel like i am doing something inside the course rather than mostly listening, that for me would bring it to the 5 stars.

Excellent! Recommend. I was able to understand the concept explain by Madan in very Eazy way. Madan is a great Guru. I really recommend course from him. I will just say if you want to start on Spring Security just go for this course without any doubt.

Trainer is well versed with the internal working of Spring security, all topics were covered in depth and also gave a great insight on the best practises. Topics like Password encoders, JWT and opaque tokens, Keycloak and Spring Auth server setup, Spring security customizations show the real capability of this framework. Appreciate all the hands-on way of presentation and detail oriented slides. Overall a well structured and informative course.

It was an amazing course. I watched so many youtube videos but not clear about the security. I would really thank Madhan for putting so many efforts to build/design this course. I dont know how to interact with Madhan but i want to ask some questions. I purchased most of the java related courses from udemy/madhan but i am requesting madhan to provide a Kafka series, System Design, Core Java Design Patterns, AWS for Java.

So far, I am enjoying the course a lot. Completed till section 10 as of now. Never thought understanding complex security could be so simple. You are making developer life simple. Thank you so much for providing such a nice course for the community...

No explica la forma recomendada por Spring, que es una arquitectura BFF (Backend For Frontend), sino la típica forma de enviar el token JWT al frontend, que es susceptible de ataques XSS. Recomendaría a la gente de la India usar inteligencia artificial para el audio cuando hagan vídeos, puesto que el "HIndglish" cuesta mucho de entender y molesta al oído escucharlo

This is the second course of this instructor in which I attended after completing Spring Framework/Spring Boot course. The instructor has a huge knowledge and presents it very effectively. I learnt a lot.

Excellent course. I learned a lot of deeply concepts about Spring Security. Now, I feel confident because of the hands-on that this course gave it to me. Very recommended. Don't trust haters, this is a really good course

"In the real world, we use Spring Security all the time, but usually, we only know the basics. What makes this course great is how it deconstructs OAuth2 flows (Authorization Code, PKCE, Client Credentials) so clearly. Latest Tech: It features the new Spring Authorization Server, a huge plus if you want to build your own auth provider. Security Essentials: You’ll learn the nitty-gritty of PasswordEncoder, Session Fixation, and session management. Keycloak: Being able to run Keycloak in Docker as a full IAM solution is a game-changer. This course gave me the confidence I needed to level up our company’s API security.

At the beginning I was very excited and happy about this course. Every topic was explained good and in-depth. The problem began in the last few sections. JWT section lacks of refresh tokens implementation and some theory about where to store these tokens, but in general this section was good too. The main problem for me was OAuth 2.0 section. Beside theory which was explained really good, the practical courses were quite disappointing. Social logins section lacks of topics about user details service to map social user to db one (which instructor said is impossible, but in fact it's easy to make and widely used). Section about keycloak integration was more about keycloak itself than how to properly implement it in client application. It lacks of real examples how to proces authentication and authorization flow inside client side app without using 3rd-party node module. Same with spring auth server - copy & paste from docs, change some settings and test using built-in oauth option in postman. I'd really love to see real life example how to perform all of these requests using plain requests (not built-in oauth 2 functions or node modules)