Search⌘ K
Home
Courses
Building Scalable Applications with Thymeleaf and Spring Boot

Hardcoded Password

Explore the process of configuring Spring Boot security focusing on hardcoded passwords. Learn to create a security configuration class, use password encoders, and define in-memory users with roles. This lesson helps you understand the basics of authentication setup and secure password handling in Spring Boot applications.

We'll cover the following...

Security configuration

The heart of security configuration always starts from a @Configuration class that extends org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter. It’s usually placed in the infrastructure.security package and named as WebSecurityConfiguration:

Java
package com.tamingthymeleaf.application.infrastructure.security;
import org.springframework.context.annotation.Configuration;
import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
import org.springframework.security.crypto.password.PasswordEncoder;
@Configuration //<.>
public class WebSecurityConfiguration extends WebSecurityConfigurerAdapter { //<.>
    private final PasswordEncoder passwordEncoder;
    public WebSecurityConfiguration(PasswordEncoder passwordEncoder) { //<.>
        this.passwordEncoder = passwordEncoder;
    }
    @Override
    protected void configure(AuthenticationManagerBuilder auth) throws Exception { //<.>
        auth.inMemoryAuthentication() //<.>
            .withUser("user") //<.>
            .password(passwordEncoder.encode("verysecure")) //<.>
            .roles("USER"); //<.>
    }
}
  • Annotate the class with @Configuration so the component scanning will pick it up
...