Learn Advanced - API Security
Terms to learn
Authentication(AuthN) Authorization(AuthZ) OpenID(AuthN protocol) OAuth 2.0(AuthZ protocol)
Theory to learn
- OAuth 2.0
- Spring Security 5.x - OAuth 2.0
Building a sample
- Spring Security OAuth 2.x
- Spring Seucrity 5.x
- Spring Boot 2.x - OAuth2.0
Specific issue fixing
Modelling Inheritance
References
- How to Improve the Security of API Keys
- Mobile API Security Techniques Part1
- Mobile API Security Techniques Part2
- Client Id/Secret Basic
========================= ClientDetailsUserDetailsService https://github.com/spring-projects/spring-security-oauth/blob/master/spring-security-oauth2/src/test/java/org/springframework/security/oauth2/provider/client/JdbcClientDetailsServiceTests.java
https://gitee.com/LinYuanTongXue/OAuth2-Demo
=========================