Spring Security | Authentication, Authorization & SecurityContext | Spring Boot Full Course #35

Spring Boot Full Course #35 In this video, we begin Spring Security from absolute scratch and build a clear understanding of how application security actually works. Instead of directly jumping into configuration, we first understand the fundamental problems Spring Security solves: verifying identity, controlling access, maintaining authentication state, and protecting requests from common attacks. Topics covered in this video: What application security means Assets, threats, vulnerabilities, and trust boundaries Authentication vs. authorization Identity, credentials, principal, roles, and authorities Spring Security’s Authentication object SecurityContext and SecurityContextHolder How ThreadLocal stores the current authenticated user Stateful authentication using sessions and cookies Stateless authentication using tokens JWT vs. opaque tokens Bearer tokens and per-request authentication Authentication mechanism vs. session policy Spring Boot Security auto-configuration Default user and generated security password Form Login vs. HTTP Basic Why POST requests may return 403 Forbidden Introduction to CSRF protection By the end of this lecture, you will understand what happens after adding the Spring Security dependency and how Spring Boot secures every endpoint by default. This lecture builds the foundation required to understand the complete internal architecture of Spring Security in the upcoming videos. JAVA Beginner to Advance Series :    • Java Full Course 2026   Join our WhatsApp Group: https://www.whatsapp.com/channel/0029... Code and Notes: Github : https://github.com/adityatandon15/Spr... We have paid courses on DSA, Web Development , Blockchain, System Design & GenAI. Join Courses: https://strikes.in/ Coder Army Website: https://coderarmy.in/#home Coder Army App: https://play.google.com/store/apps/de... Connect with Aditya Tandon Instagram :   / adityatandon2   LinkedIn :   / adityatandon2   Twitter : https://x.com/adityatandon02 Timestamps: