book

Spring Boot in Practice

by Somnath Musib

August 2022

Intermediate to advanced

584 pages

16h 22m

English

Manning Publications

Read now

Unlock full access

forewordWe might be on to somethingprefaceacknowledgmentsabout this bookWho should read this book?How this book is organized: A roadmapAbout the codeliveBook discussion forumabout the authorabout the cover illustration
1.1 Introducing Spring Boot1.1.1 Why Spring Boot?1.1.2 What is Spring Boot?1.1.3 Spring Boot core features1.1.4 Spring Boot components1.2 Code examples1.2.1 Maven vs. Gradle1.2.2 Java vs. Kotlin1.2.3 Database support1.2.4 Lombok1.3 Getting started with Spring Boot1.3.1 Your first Spring Boot project1.3.2 Spring Boot project structure1.3.3 Creating an executable JAR file1.3.4 Exploring the JAR file1.3.5 Shutting down a Spring Boot application1.4 Spring Boot additional concepts1.4.1 Spring Boot startup events1.4.2 Listening events in a Spring Boot application1.4.3 Custom Spring Boot starters1.4.4 Custom autoconfiguration1.4.5 Failure analyzers1.4.6 Spring Boot actuator1.4.7 Spring Boot developer toolSummary
2.1 Managing configurations2.1.1 Using the SpringApplication class2.1.2 Using @PropertySource2.1.3 Config data file2.1.4 OS environment variable2.2 Creating custom properties with @ConfigurationProperties2.2.1 Technique: Defining custom properties with @ConfigurationProperties in a Spring Boot application2.3 Executing code on Spring Boot application startup2.3.1 Technique: Using CommandLineRunner to execute code at Spring Boot application startup2.4 Customizing logging in a Spring Boot application2.4.1 Technique: Understanding and customizing default Spring Boot logging in a Spring Boot application2.4.2 Technique: Using Log4j2 to configure logging in a Spring Boot application2.5 Validate user data using Bean Validation2.5.1 Technique: Using built-in Bean Validation annotations to validate business entity in a Spring Boot application2.5.2 Technique: Defining and using custom Bean Validation annotation to validate a POJO in a Spring Boot applicationSummary

3.1 Introducing Spring Data3.1.1 Why Spring Data?3.1.2 Spring Data modules3.2 Configuring a database in a Spring Boot application3.2.1 Technique: Configuring a relational database in a Spring Boot application3.2.2 Technique: Configuring MongoDB database in a Spring Boot application3.2.3 Technique: Initializing a relational database schema with a Spring Boot application3.3 Understanding the CrudRepository interface3.3.1 Technique: Managing domain objects in a relational database with Spring Data JPA3.3.2 Technique: Creating a custom Spring Data repository with Spring Data JPA to manage domain objects in a relational database3.4 Retrieve data from a database using Spring Data3.4.1 Defining query methods3.4.2 Technique: Defining custom query methods to retrieve domain objects from a relational database with Spring Data JPA3.4.3 Implementing pagination with PagingAndSortingRepository3.4.4 Technique: Using PagingAndSortingRepository interface to paginate and sort the data3.4.5 Specifying query using @NamedQuery3.4.6 Technique: Using a named query to manage domain objects in a relational database with Spring Data JPA3.5 Specifying query using @Query3.5.1 Technique: Using @Query annotation to define queries and retrieve domain objects in a relational database with Spring Data JPA3.6 Using Criteria API with Spring Data JPA3.6.1 Technique: Using Criteria API to manage domain objects in a relational database with Spring Data JPA3.7 Using QueryDSL with Spring Data JPA3.7.1 Technique: Using QueryDSL to manage domain objects in a relational database with Spring Data JPA3.8 Managing domain object relationships3.8.1 Technique: Managing domain objects with many-to-many relationships in a relational database with Spring Data JPASummary
4.1 Understanding Spring Boot autoconfiguration4.1.1 Understanding @Conditional annotation4.1.2 Deep dive into autoconfiguration4.2 Using Spring Boot DevTools4.2.1 Property defaults4.2.2 Automatic restart4.2.3 Live reload4.3 Creating a custom failure analyzer4.3.1 Technique: Creating a custom Spring Boot FailureAnalyzer4.4 Spring Boot Actuator4.4.1 Technique: Configuring Spring Boot Actuator in a Spring Boot application4.4.2 Understanding Spring Boot Actuator endpoints4.4.3 Managing Spring Boot Actuator endpoints4.4.4 Health endpoint deep dive4.4.5 Creating a custom Spring Boot HealthIndicator4.4.6 Technique: Defining a custom Spring Boot actuator HealthIndicator4.5 Info endpoint deep dive4.5.1 Technique: Configuring info Spring Boot Actuator endpoint4.5.2 Technique: Configuring a custom info contributor to provide custom application info in the Spring Boot Actuator endpoint4.6 Creating a custom Spring Boot Actuator endpoint4.6.1 Technique: Creating a custom Spring Boot actuator endpoint4.6.2 Spring Boot actuator metrics4.6.3 Creating custom metrics4.6.4 Gauge4.6.5 Metrics dashboard with Prometheus and GrafanaSummary
5.1 Introducing Spring Security5.2 Hello Spring Security with Spring Boot5.2.1 Technique: Enabling application security with Spring Security in a Spring Boot application5.2.2 Filter, FilterChain, and Spring Security5.2.3 Spring Security architecture5.2.4 Authenticating a user5.2.5 Spring Security autoconfiguration5.3 Using Spring Security5.3.1 Technique: Customizing the default Spring Security login page of a Spring Boot application5.3.2 Technique: Configuring in-memory authentication with custom users in Spring Security in a Spring Boot application5.3.3 Technique: Configuring JDBC authentication with Spring Security in a Spring Boot application5.3.4 Technique: Implementing JDBC authentication with custom UserDetailsService in a Spring Boot application5.3.5 Technique: Implementing LDAP authentication in a Spring Boot application5.3.6 Technique: Implementing HTTP basic authentication in a Spring Boot applicationSummary
6.1 Enabling HTTPS in a Spring Boot application6.1.1 Technique: Enabling HTTPS in a Spring Boot application6.2 Securing secrets in Spring Cloud Vault6.2.1 Technique: Managing application secrets with HashiCorp Vault in a Spring Boot application6.3 Implementing user registration6.3.1 Technique: Implementing user registration with Spring Security in a Spring Boot application6.4 Implementing email verification at user registration6.4.1 Technique: Validating user email addresses in a Spring Boot application6.5 Controlling multiple incorrect login attempts6.5.1 Technique: Controlling multiple incorrect login attempts in a Spring Boot application6.6 Implementing a Remember Me feature6.6.1 Technique: Enabling a Remember Me feature in a Spring Boot application with Spring Security6.7 Implementing reCAPTCHA6.7.1 Technique: Enabling Google reCAPTCHA in a Spring Boot application with Spring Security6.8 Enabling two-factor authentication with Google Authenticator6.8.1 Technique: Enabling two-factor authentication in a Spring Boot application6.9 Authentication with OAuth26.9.1 Technique: Enabling sign in with Google in a Spring Boot application6.10 Securing Actuator endpoints6.10.1 Technique: Securing Spring Boot Actuator endpointsSummary
7.1 Developing a RESTful API with Spring Boot7.1.1 Technique: Developing a RESTful API using Spring Boot7.2 Managing exceptions in a Spring Boot RESTful API7.2.1 Technique: Handling exceptions in a RESTful API7.3 Testing a RESTful API7.3.1 Technique: Testing a RESTful API in a Spring Boot application7.4 Documenting a RESTful API7.4.1 Technique: Documenting a RESTful API with OpenAPI7.5 Implementing RESTful API versioning7.5.1 Technique: Implementing versioning in a RESTful API7.6 Securing a RESTful API7.6.1 Technique: Using JWT to authorize RESTful API requestsSummary
8.1 Introduction to reactive programming8.1.1 Backpressure8.1.2 Benefits of reactive programming8.2 Understanding Project Reactor8.3 Introducing Spring WebFlux8.3.1 Technique: Developing a reactive RESTful API with annotated controllers8.3.2 Technique: Developing a reactive RESTful API with functional endpoints8.4 Testing reactive applications8.4.1 Technique: Using WebClient to build an API client8.5 Introduction to RSocket8.5.1 Technique: Developing applications using RSocket and Spring Boot8.6 Introduction to WebSocket8.6.1 Technique: Developing an application using WebSocket and Spring BootSummary
9.1 Running Spring Boot applications as executable JAR files9.1.1 Technique: Packaging and executing a Spring Boot application as an executable JAR file9.2 Deploying Spring Boot applications as WAR in the WildFly application server9.2.1 Technique: Packaging and deploying a Spring Boot application as WAR in the WildFly application server9.3 Deploying Spring Boot applications in Cloud Foundry9.3.1 Technique: Deploying a Spring Boot application to Cloud Foundry9.4 Deploying Spring Boot applications in Heroku9.4.1 Technique: Deploying a Spring Boot application in Heroku9.5 Running Spring Boot applications as Docker containers9.5.1 Technique: Creating a container image and running a Spring Boot application as a container9.6 Deploying Spring Boot applications in a Kubernetes cluster9.6.1 Technique: Deploying a Spring Boot application in a Kubernetes cluster9.7 Deploying Spring Boot applications in Red Hat OpenShift9.7.1 Technique: Deploying a Spring Boot application in the Red Hat OpenShift platformSummary
10.1 Spring Boot with Kotlin10.1.1 Technique: Developing a Spring Boot application with Kotlin10.1.2 Technique: Securing a Spring Boot Kotlin application with Spring Security10.2 Introducing Spring Native10.2.1 Introduction to GraalVM10.2.2 GraalVM native image10.2.3 Spring Boot native image10.2.4 Technique: Generating Spring Boot native image using buildpacks10.2.5 Technique: Generating Spring Boot native image using a Maven plugin10.2.6 Understanding Spring AOT Maven Plugin10.3 Spring Boot with GraphQL10.3.1 Issues with REST10.3.2 Introduction to GraphQL10.3.3 Using GraphQL with Spring Boot10.3.4 Technique: Developing a GraphQL API with a Spring Boot application10.3.5 Technique: Developing a GraphQL API over WebSocket with a Spring Boot applicationSummary
A.1 Generating Spring Boot applications with Spring InitializrA.1.1 Introducing Spring InitializrA.1.2 Technique: Generating a Spring Boot application with the Spring Initializr Web user interfaceA.1.3 Technique: Generating a Spring Boot application with Spring Initializr in IntelliJ IDEA IDEA.1.4 Technique: Generating a Spring Boot Application with Spring Initializr using the Spring Tool SuiteA.1.5 Technique: Generating a Spring application with Spring Initializr in Visual Studio CodeA.1.6 Technique: Generating a Spring Boot application with Spring Initializr using Command Line InterfaceA.2 Bootstrapping and executing a Spring Boot application with Spring Boot CLIA.2.1 Installing the Spring Boot CLIA.2.2 Technique: Developing a simple Spring Boot application with Spring Boot CLIA.2.3 Technique: Building a Web application using Spring Boot CLI
B.1 Revisiting Spring MVCB.1.1 Front controller design patternB.1.2 Understanding request processingB.2 Understanding ThymeleafB.2.1 Displaying attributesB.2.2 Conditional evaluationB.2.3 Managing formsB.3 Enabling a template engine in Spring BootB.3.1 Technique: Building a Spring Boot Web application with Thymeleaf

Content preview from Spring Boot in Practice

5 Securing Spring Boot applications

This chapter covers

An overview of Spring Security and common security threats
Enabling Spring Security in a Spring Boot application and understanding Spring Security autoconfiguration
Customizing Spring Security with in-memory, JDBC, and LDAP authentication
Implementing HTTP basic authentication in a Spring Boot project

In past chapters, you learned several essential techniques to build Spring Boot applications, and you are now well-versed in core Spring Boot concepts, understand several techniques to communicate to the database, can monitor Spring Boot applications with Spring Boot Actuator, and are in a position to start building enterprise-grade Spring Boot applications. However, before you get super ...