👉 Land the job. Get the promotion. Become a better dev. https://skool.com/amigoscode-academy Spring Security is one of those topics most developers never fully understand - until now. In this updated 2026 crash course, I'll teach you everything you need to get up and running with Spring Security 7 (on Spring Boot 4 and Java 25). We cover the core architecture and the security filter chain, then implement real authentication step by step: Form Login, Basic Authentication, sessions & the JSESSIONID cookie, CSRF, the Authentication Manager & providers, custom UserDetailsService, and password encoding. By the end you'll understand how Spring Security actually works under the hood — and be able to confidently put it on your CV and demonstrate it in interviews. ⭐ Get the full course + diagrams + source code: https://skool.com/amigoscode 💬 Join the free community to ask questions & grab resources: https://skool.com/amigoscode 🧰 Requirements: • Java 25+ • Spring Boot 4 • Spring Security 7 📂 Source code & branches: https://github.com/amigoscode/spring-security ⏱️ *TIMESTAMPS* 00:00 Intro – what you'll learn 00:55 Spring Security architecture & the filter chain 07:14 Spring Security docs & versions (Spring Security 7) 10:49 Course repo & branches walkthrough 12:08 Requirements (Java 25, Spring Boot 4) & running the starter 16:42 Form Login – how it works (diagram) 20:38 Implementing Form Login (SecurityConfig) 27:38 Running the app & testing login 32:31 The JSESSIONID cookie explained 37:45 Storing sessions in Redis / JDBC 43:42 Customizing the login & logout 47:39 Exploring the filters in the source code 51:50 Basic Authentication – how it works (diagram) 56:10 Configuring Basic Auth (stateless + CSRF disabled) 1:01:54 Testing Basic Auth (browser, Base64, curl) 1:14:27 Realm name & WWW-Authenticate header 1:16:30 CSRF explained 1:18:45 Authentication Manager & Provider Manager 1:21:20 Debugging the DAO Authentication Provider 1:28:11 Custom users with UserDetailsService 1:36:11 Why login fails – the password encoder & NoOp 1:42:24 Password encoding & why we never store plain text 1:43:14 Wrap up 🔔 *Subscribe for more backend & security content!* https://www.youtube.com/@amigoscode?sub_confirmation=1 👉 *Land the job. Get the promotion. Become a better dev.* https://skool.com/amigoscode-academy 🤝 *Connect with me* • Skool: https://skool.com/amigoscode • LinkedIn: https://www.linkedin.com/in/nelsonamigoscode • Instagram: https://www.instagram.com/amigoscode • Twitter/X: https://x.com/amigoscode • GitHub: https://github.com/amigoscode #springSecurity #springboot #java