Deesha Tech Academy
Menu
DTA-08AvailableJavaSpring BootSpring SecurityJWTOAuth2Keycloak

Spring Security

Put authentication and authorisation on a real API without inventing your own

Designed for

  • Developers who have shipped an API with no authentication on it
  • Backend engineers who copied a JWT filter from a blog post
  • Anyone who has been asked "how do you handle roles" in an interview
Fee
₹3,000
Duration
20 guided hours
Mode
Online / Offline
Ask about this course

Course curriculum

7 progressive modules

Duration: 20 guided hours

  1. Foundation
  2. Intermediate
  3. Advanced
  1. FoundationSessions 1–3

    The filter chain, and what actually happens on a request

    • The security filter chain in order, and where your code sits in it
    • Authentication compared with authorisation, precisely
    • SecurityContext, principals and how they propagate
    • Configuring HTTP security without copying a config you cannot read
    • Why the default configuration blocks everything, and what that tells you

    What you will build

    One endpoint secured and one left open, with the filter chain printed and each filter's job named.

    Module 1

Batches

Choose a schedule that works for you

No dates yet

Tell us the schedule that would work

We plan batches around demand. Weekend, morning and intensive formats open when enough people ask for them.

Register your interest

Who teaches this

Learn with experienced practitioners

All trainers and mentors
  • Vishal Shah

    Vishal Shah

    Founder & Principal Trainer

    Two decades building and teaching commerce, banking and cloud platforms, and still writing code

    • Java & Spring Boot microservices
    • TypeScript, React, Angular & Next.js
    • Composable commerce (commercetools)
    Full profile →

Detailed course information

Full course brief

Security is the part of a backend most often copied rather than understood. A JWT filter from a blog post works on the happy path and fails in ways nobody notices until an audit.

This week is adversarial by design. You secure an API, then attack it from a second terminal, then fix what broke, and you finish able to say why each control is there, including the OAuth2 flow most courses wave at.

Who this is for

You need a working Spring Boot API. If you do not have one, Spring Boot REST API comes first and builds the service you will secure here.

Where it leads

Group three of Backend Developer (Java) and part of Full-Stack Developer (Java).

No dates announced

We open batches around demand. Tell us the schedule that would work and we will let you know first.

Send your details instead

This website does not store or send these details. Your email or WhatsApp app will open with the message ready for you to review and send.

Where this leads

Need help deciding?

Ask about the curriculum, delivery options or the next batch.

Talk to Academy
Enquire