In this chapter, you learned what Spring Security is and the major operations in Spring Security. We took a quick look at the Servlet filter and understood the security use case. We configured Spring Security by adding dependencies in pom.xml and also configured namespace.

We secured the web application's URL access by providing DelegatingFilterProxy as the filter class and the URL pattern. We created a separated Spring Security configuration file. We saw different ways of logging into the web application.

We authenticated users with in-memory definition and also against the database. We saw Spring Security supports for encrypt password. Lastly, we configured the method-level security in Spring Security.

In the next chapter, we will cover Spring testing. We will understand testing using JUnit4 and TestNG. We will also understand the Mockito framework (look into MockMVC).