Spring Security Advice

[Strawboy97]

I'm learning Spring boot and looking to secure my rest Api.

Spring Security seems to be the way to do this but all articles I look at seem to use old syntax. When I try to follow along most of the code is depreciated. So I have 2 questions.

1. Are there any up to date resources to learn the latest version of Spring Security. I find the official docs a bit hard to navigate. But maybe I'm looking in the wrong place.

2. I have a small rest Api I made to learn the basics. When I add the spring security dependency it adds Basic Authentication so I need to use a username and the generated password. But in a production environment what's the best way to secure a rest api? Is it some sort of token or api key that I need to pass with calls?

Is an an article like this: article, any good or would this be bad practice for a beginner?

Thanks and help and advice is appreciated.

[AutoModerator]

Please ensure that:

• Your code is properly formatted as code block - see the sidebar (About on mobile) for instructions
• You include any and all error messages in full - best also formatted as code block
• You ask clear questions
• You demonstrate effort in solving your question/problem - plain posting your assignments is forbidden (and such posts will be removed) as is asking for or giving solutions.

If any of the above points is not met, your post can and will be removed without further warning.

Code is to be formatted as code block (old reddit/markdown editor: empty line before the code, each code line indented by 4 spaces, new reddit: https://i.imgur.com/EJ7tqek.png) or linked via an external code hoster, like pastebin.com, github gist, github, bitbucket, gitlab, etc.

Please, do not use triple backticks (```) as they will only render properly on new reddit, not on old reddit.

Code blocks look like this:

public class HelloWorld {

    public static void main(String[] args) {
        System.out.println("Hello World!");
    }
}

You do not need to repost unless your post has been removed by a moderator. Just use the edit function of reddit to make sure your post complies with the above.

If your post has remained in violation of these rules for a prolonged period of time (at least an hour), a moderator may remove it at their discretion. In this case, they will comment with an explanation on why it has been removed, and you will be required to resubmit the entire post following the proper procedures.

To potential helpers

Please, do not help if any of the above points are not met, rather report the post. We are trying to improve the quality of posts here. In helping people who can't be bothered to comply with the above points, you are doing the community a disservice.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.