How to Install Spring Security in Spring Boot (Without Breaking Everything)

Опубликовано: 09 Май 2026
на канале: Deividas Strole
35
1

Ever wanted to protect your Java app like it’s guarding the last donut in the office? 🍩 In this video, Deividas Strole shows you how to install Spring Security in your Spring Boot application and secure your admin endpoints, while keeping public endpoints open for everyone else.

🎯 What You'll Learn:
Add Spring Security to your Spring Boot project safely
Lock down /admin/** endpoints like Fort Knox 🔐
Keep /api/articles/** publicly accessible 📖
Create an in-memory admin login (username: admin, password: adminpass)
Test protected endpoints from Postman or React
Use Basic Auth without running into CORS issues

🛠️ Quick Setup Steps:
Add Spring Security to your Maven project: spring-boot-starter-security
Create a SecurityConfig class:
/admin/** requires login
/api/articles/** is public
Other endpoints allowed as needed
Add an in-memory admin user:
Username: admin
Password: adminpass (use bcrypt encoding!)
Role: ADMIN
Test your endpoints:
Public GET /api/articles/titles works without login
Protected POST /admin/articles returns 401 unless logged in
Send Authorization header from React using Basic base64(admin:adminpass)

💡 Perfect For:
Java developers securing Spring Boot applications
Full-stack developers integrating React with Spring Boot backends
Anyone learning Spring Security and Basic Authentication
Developers looking to protect admin endpoints while keeping public APIs open

🎥 Created by Deividas Strole

🔗 Connect & Learn More with Deividas Strole:
Website: https://deividasstrole.com
LinkedIn:   / deividas-strole  
GitHub: https://github.com/deividas-strole
Dev.to: https://dev.to/deividas-strole
Medium:   / deividas-strole  
X (Twitter): https://x.com/deividasstrole

👍 Like this video if it helped you secure your Spring Boot app!
💬 Comment below if you want a part two with Cloudinary image uploads
🔔 Subscribe for more Java, Spring Boot, and full-stack development tutorials

#DeividasStrole #SpringBoot #SpringSecurity #JavaDev #FullStackDevelopment #SecuredAPI #WebDevelopment #TechTutorial #Programming