Web SecurityOAuth 2.0 and OpenID Connect by Example with Spring Boot 3
Distinguish OAuth 2.0 from OpenID Connect, build an OIDC login client and JWT-validating resource server with Spring Security, including tests.
JWT: Proper Usage and Common Security Mistakes
A comprehensive guide to using JWT safely in Spring Boot and common security issues like alg=none, exposed secrets, and missing expiration checks.
Storing Passwords Correctly: bcrypt and argon2
Learn how to hash passwords securely with bcrypt and argon2 in Spring Boot, avoid common mistakes that leave systems vulnerable to attack.
5 Ways to Block Prompt Injection: Detailed Explanation with Examples
Learn 5 defensive layers against prompt injection for LLM systems — spotlighting, instruction hierarchy, least-privilege tools, human-in-the-loop, planner/executor split — with example Java code.
CSRF and SameSite Cookie: Defense Mechanisms in Spring Security
Learn how CSRF attacks work, what the SameSite cookie attribute does, and how to configure CSRF tokens correctly in Spring Boot.
SQL Injection and Prepared Statements in Java
Learn how SQL injection works and how PreparedStatement/JPA help you defend against it completely.
XSS: Attacks and Prevention in Spring Boot Applications
Learn XSS attack mechanisms (Reflected, Stored, DOM-based) and effective prevention using encoding, CSP, and Spring Security tools.