Spring Security began as a third-party security module called Acegi Security and was later included as an official part of the Spring portfolio. It provides authentication, authorization and protection for Spring-based applications and includes modules for core security, web security, configuration, LDAP integration, access control lists, CAS support and OpenID integration. The document discusses what Spring Security is, why it is needed, the difference between authentication and authorization, session management, LDAP authentication, and shows how Spring Security acts as a filter to secure applications.

1. By
Bibhuti Barun

2. Agenda for the session:
What is Spring Security?
Why we need Spring Security?
Authentication VS Authorization
Session Management
Authentication using LDAP

3. History:
 Spring Security began in late 2003 as “The
Acegi Security System for Spring”
 The 1.0.0 final release was published in May
2006
 Acegi Security became an official Spring
Portfolio project towards the end of 2007 and
was rebranded as “Spring Security”.

4. Spring Security Modules:
 Core - spring-security-core.jar
 Web - spring-security-web.jar
 Config - spring-security-config.jar
 LDAP - spring-security-ldap.jar
 ACL - spring-security-acl.jar
 CAS - spring-security-cas-client.jar
 OpenID - spring-security-openid.jar

5. Application Without Security ?

6. Browser Application
request
response

7. Browser Application
request
response
Spring
Security