| S.No |
Topic |
Sub-Topics |
| 1 | Spring Security | Security Basics, Authentication vs Authorization, Filters, DelegatingFilterProxy, SecurityContext |
| 2 | Spring Security Architecture | Filter Chain, SecurityContextHolder, AuthenticationManager, ProviderManager, AccessDecisionManager |
| 3 | Security Config Setup | Spring Boot Starter Security, @EnableWebSecurity, SecurityFilterChain, HttpSecurity, WebSecurityCustomizer |
| 4 | Authentication | Authentication Object, UserDetails, UserDetailsService, AuthenticationProvider, PasswordEncoder |
| 5 | Authorization | @PreAuthorize, @PostAuthorize, AccessDecisionVoters, Role Hierarchy, Security Expressions |
| 6 | Password Encoding | BCryptPasswordEncoder, DelegatingPasswordEncoder, Password Storage, Strength Factor, Salting |
| 7 | UserDetailsService | Custom Implementation, LoadUserByUsername, InMemoryUserDetailsManager, JDBC UserDetails, JPA UserDetails |
| 8 | AuthenticationProvider | ProviderManager, DaoAuthenticationProvider, Custom Provider, Exceptions, Authentication Logic |
| 9 | Security Filters | Filter Ordering, UsernamePasswordAuthenticationFilter, BasicAuthenticationFilter, LogoutFilter, AbstractAuthenticationProcessingFilter |
| 10 | CSRF Protection | CSRF Token, CSRF Header, Form Integration, Stateless CSRF, CSRF Exclusions |
| 11 | Session Management | Session Fixation, Session Creation Policy, Concurrent Sessions, Session Timeout, Remember Me |
| 12 | Remember Me | Persistent Token, Cookie Based Token, TokenRepository, Auto Login, Security Config |
| 13 | Login and Logout | Custom Login Page, Default Login Page, Logout Success, Redirects, Failure Handler |
| 14 | Role Based Security | Roles vs Authorities, GrantedAuthority, RoleHierarchyImpl, AccessDecision, Policy Rules |
| 15 | Method Level Security | @Secured, @PreAuthorize, @PostAuthorize, Meta Annotations, SpEL Expressions |
| 16 | JWT Authentication | JWT Token, Token Filter, Token Parsing, Expiry Handling, Refresh Tokens |
| 17 | JWT Implementation | Token Generation, Signing, Claims, Token Validation, Blacklist Tokens |
| 18 | OAuth2 Overview | OAuth2 Roles, Client, Resource Server, Authorization Server, Grant Types |
| 19 | OAuth2 Client | Client Registration, Redirect URI, Client Secret, Access Token, Scopes |
| 20 | OAuth2 Login | Login with Google, Authorization Code Flow, Token Exchange, OpenID Connect, Claims Mapping |
| 21 | OAuth2 Resource Server | Token Verification, JWKS Endpoint, Bearer Token Filter, Scope Validation, Security Rules |
| 22 | Spring Security 6 Changes | SecurityFilterChain Bean, Removed WebSecurityConfigurerAdapter, Lambda DSL, AuthorizationManager, New Defaults |
| 23 | Security for REST APIs | Stateless Auth, Bearer Token, Unauthorized Handling, Exception Handling, Cors Config |
| 24 | Cross-Origin Resource Sharing | CORS Basics, PreFlight Requests, CorsConfiguration, Global CORS, Allowed Origins |
| 25 | Custom Authentication | Two Factor Auth, Token Based Auth, Mobile OTP Auth, Custom Filter, External Service Auth |
| 26 | Security Testing | MockMvc Test, @WithMockUser, Security Test Utils, Access Rules Test, JWT Test |
| 27 | Actuator Security | Actuator Endpoints, Health Endpoint, Info Endpoint, Role Based Actuator, Token Based Access |
| 28 | Logging and Monitoring | Audit Events, Failure Events, Success Events, Logging Details, Monitoring Logs |
| 29 | Best Practices | Password Policy, Account Locking, Token Expiry, Key Rotation, Secure Storage |
| 30 | Interview Preparation | Architecture Questions, JWT Questions, OAuth Questions, Authorization Rules, Real Time Scenarios |
