Spring security features

LDAP (Lightweight Directory Access Protocol)

This is an open application protocol used to maintain and access distributed directory information services over the Internet protocol.

Single sign-on

This feature allows users to access multiple applications with the help of a single account (username and password).

JAAS (Java Authentication and Authorization Service) LoginModule

This is a pluggable authentication module implemented in Java. Spring Security supports its authentication process.

Basic Access Authentication

Spring Security supports basic access authentication, which is used to provide username and password during requests.

Digest Access Authentication

This feature allows us to make the authentication process more secure than basic access authentication. It requires the browser to confirm the user's identity before sending sensitive data over the network.

Remember-me

Spring Security supports this feature with the help of. HTTP Cookies. It will remember user information and avoid logging in again from the same computer before the user logs out.

Web Form Authentication

In this process, the web form collects and validates user credentials from the credentials of the network browser. When we need to implement web form authentication, Spring Security supports it.

Authorization

Spring Security provides this feature to authorize users before accessing resources. It allows developers to define access strategies for resources.

Software Localization

This feature allows us to create application user interfaces in any language.

HTTP Authorization

Spring provides this feature for HTTP authorization of web request URLs using Apache Ant paths or regular expressions.

Spring Security 5features added in .0

OAuth 2.0 Login

This feature provides the necessary login functionality for users by using their existing accounts on GitHub or Google to the application. This feature is implemented by using OAuth 2authorization codes granted according to the authorization framework specified in .0.

Reactive Support

From Spring Security 5Starting from version .0, it provides reactive support and can even be integrated with Spring WebFlux.

Modern Password Encoding

Spring Security 5.0 introduced new password encoders DelegatingPasswordEncoder which can more modernly address the previous encoders NoOpPasswordEncoder all questions.