Insecure application
Hello Security
Custom Login Page
Admin for H2
CSRF and Security headers disabled

Now we are vulnerable to CSRF and clickjacking attacks
H2 has own config

- H2 has CSRF/clickjacking disabled
- Remaining site has CSRF/clickjacking protection
Authenticate after sign up new user
JDBC Authentication w/ default schema
JDBC authentication against custom schema
Custom Authentication
Accessing the current User
Secure MessageRepository with @PostAuthorize
MessagePermissionEvaluator
Testing