- Lab
- Core Tech

Securing Spring Data REST APIs

Path Info
Table of Contents
-
Challenge
Authenticating Requests to a Spring Data REST API with HTTP Basic
In this module, you'll create a REST API that authenticates with a username and password against a database. ### Solution To view the solution, run
git diff origin/master..solution-module-one
in the Terminal, and pressEnter
to see the next lines of the difference.You may also browse the files of the solution by stashing your changes with
git stash
and runninggit checkout solution-module-one
to switch branches. -
Challenge
Authorizing Requests to a Spring Data REST API with HTTP Basic
Now that you can authenticate, in this module, you'll build authorization rules into your REST API. You'll focus on method-based security. ### Solution To view the solution, run
git diff origin/master..solution-module-two
in the Terminal, and pressEnter
to see the next lines of the difference.You may also browse the files of the solution by stashing your changes with
git stash
and runninggit checkout solution-module-two
to switch branches. -
Challenge
Using CORS and HTTP Basic
In this module, you'll configure the REST API to perform a CORS handshake so that it can be used by clients from a different hostname. ### Solution To view the solution, run
git diff origin/master..solution-module-three
in the Terminal, and pressEnter
to see the next lines of the difference.You may also browse the files of the solution by stashing your changes with
git stash
and runninggit checkout solution-module-three
to switch branches. -
Challenge
Authenticating and Authorizing Requests with JWT
In this module, you'll add JWT-based Bearer Token Authentication as a more secure alternative to HTTP Basic. ### Solution To view the solution, run
git diff origin/master..solution-module-four
in the Terminal, and pressEnter
to see the next lines of the difference.You may also browse the files of the solution by stashing your changes with
git stash
and runninggit checkout solution-module-four
to switch branches. -
Challenge
Authenticating and Authorizing Requests with Opaque Token
In this module, you'll change JWTs out for Opaque Tokens for additional security. ### Solution To view the solution, run
git diff origin/master..solution-module-five
in the Terminal, and pressEnter
to see the next lines of the difference.You may also browse the files of the solution by stashing your changes with
git stash
and runninggit checkout solution-module-five
to switch branches. -
Challenge
Using CORS and Bearer Tokens
In this module, you'll create a more secure CORS setup as well as a secure handshake between
Resolutions
and another REST API. ### Solution To view the solution, rungit diff origin/master..solution-module-six
in the Terminal, and pressEnter
to see the next lines of the difference.You may also browse the files of the solution by stashing your changes with
git stash
and runninggit checkout solution-module-six
to switch branches.
What's a lab?
Hands-on Labs are real environments created by industry experts to help you learn. These environments help you gain knowledge and experience, practice without compromising your system, test without risk, destroy without fear, and let you learn from your mistakes. Hands-on Labs: practice your skills before delivering in the real world.
Provided environment for hands-on practice
We will provide the credentials and environment necessary for you to practice right within your browser.
Guided walkthrough
Follow along with the author’s guided walkthrough and build something new in your provided environment!
Did you know?
On average, you retain 75% more of your learning if you get time for practice.