Entire Site
Free Trial
Safari Books Online is a digital library providing on-demand subscription access to thousands of learning resources.
- Create BookmarkCreate Bookmark
- Create Note or TagCreate Note or Tag
- DownloadDownload
- PrintPrint
Chapter 9. Securing Spring > Securing web requests
9.2. Securing web requests
Everything you do with a Java web application starts with an HttpServletRequest. And if the request is the access point to a web application, then that’s where security for a web application should begin.
The most basic form of request-level security involves declaring one or more URL patterns as requiring some level of granted authority and preventing users without that authority from accessing the content behind those URLs. Taking it a step further, you may want to require that certain URLs can only be accessed over HTTPS.
