<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>SpringSource Team Blog &#187; Security</title>
	<atom:link href="http://blog.springsource.org/category/security/feed/" rel="self" type="application/rss+xml" />
	<link>http://blog.springsource.org</link>
	<description>The voice of SpringSource</description>
	<lastBuildDate>Mon, 09 Jan 2012 19:03:49 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.1.1</generator>
		<item>
		<title>Cross Site Request Forgery and OAuth2</title>
		<link>http://blog.springsource.org/2011/11/30/10317/</link>
		<comments>http://blog.springsource.org/2011/11/30/10317/#comments</comments>
		<pubDate>Wed, 30 Nov 2011 16:23:04 +0000</pubDate>
		<dc:creator>Dave Syer</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Spring]]></category>
		<category><![CDATA[Web]]></category>

		<guid isPermaLink="false">http://blog.springsource.org/?p=10317</guid>
		<description><![CDATA[In this short article we look at Cross Site Request Forgery in the context of OAuth2, looking at possible attacks and how they can be countered when OAuth2 is being used to protect web resources. OAuth2 is a protocol enabling a Client application, often a web application, to act on behalf of a User, but  <a href="http://blog.springsource.org/2011/11/30/10317/"><em>Read more...</em></a>]]></description>
		<wfw:commentRss>http://blog.springsource.org/2011/11/30/10317/feed/</wfw:commentRss>
		<slash:comments>3</slash:comments>
		</item>
		<item>
		<title>Spring Security Configuration with Scala</title>
		<link>http://blog.springsource.org/2011/08/01/spring-security-configuration-with-scala/</link>
		<comments>http://blog.springsource.org/2011/08/01/spring-security-configuration-with-scala/#comments</comments>
		<pubDate>Mon, 01 Aug 2011 18:18:52 +0000</pubDate>
		<dc:creator>Luke Taylor</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Spring]]></category>
		<category><![CDATA[Scala]]></category>

		<guid isPermaLink="false">http://blog.springsource.com/?p=9105</guid>
		<description><![CDATA[In a previous article, Behind the Spring Security Namespace, I talked about how the Spring Security namespace has been very successful in providing a simple alternative to plain Spring bean configuration, but how there is still a steep learning curve when you want to start customizing its behaviour. Behind the XML elements and attributes, various  <a href="http://blog.springsource.org/2011/08/01/spring-security-configuration-with-scala/"><em>Read more...</em></a>]]></description>
		<wfw:commentRss>http://blog.springsource.org/2011/08/01/spring-security-configuration-with-scala/feed/</wfw:commentRss>
		<slash:comments>5</slash:comments>
		</item>
		<item>
		<title>Simplified Spring Security with Grails</title>
		<link>http://blog.springsource.org/2010/08/11/simplified-spring-security-with-grails/</link>
		<comments>http://blog.springsource.org/2010/08/11/simplified-spring-security-with-grails/#comments</comments>
		<pubDate>Wed, 11 Aug 2010 11:17:45 +0000</pubDate>
		<dc:creator>Peter Ledbrook</dc:creator>
				<category><![CDATA[Groovy/Grails]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://blog.springsource.com/?p=5385</guid>
		<description><![CDATA[Spring Security is a powerful library for securing your applications that comes with a bewildering number of options. Based on Spring, it can be readily integrated into a Grails application. But why not save the hassle and use the new improved Grails plugin? The plugin has gone through several evolutionary stages that started with the  <a href="http://blog.springsource.org/2010/08/11/simplified-spring-security-with-grails/"><em>Read more...</em></a>]]></description>
		<wfw:commentRss>http://blog.springsource.org/2010/08/11/simplified-spring-security-with-grails/feed/</wfw:commentRss>
		<slash:comments>103</slash:comments>
<enclosure url="http://grails.org/dist/screencasts/screencast10.mov" length="40239058" type="video/quicktime" />
<enclosure url="http://grails.org/dist/screencasts/screencast11.mov" length="19196976" type="video/quicktime" />
		</item>
		<item>
		<title>Spring Security in Google App Engine</title>
		<link>http://blog.springsource.org/2010/08/02/spring-security-in-google-app-engine/</link>
		<comments>http://blog.springsource.org/2010/08/02/spring-security-in-google-app-engine/#comments</comments>
		<pubDate>Mon, 02 Aug 2010 09:58:44 +0000</pubDate>
		<dc:creator>Luke Taylor</dc:creator>
				<category><![CDATA[Cloud Computing]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Spring]]></category>

		<guid isPermaLink="false">http://blog.springsource.com/?p=5272</guid>
		<description><![CDATA[Spring Security is well-known for being highly customizable, so for my first attempt at working with Google App Engine, I decided to create a simple application which would explore the use of GAE features by implementing some core Spring Security interfaces. In this article we&#039;ll see how to: Authenticate using Google Accounts. Implement &#034;on-demand&#034; authentication  <a href="http://blog.springsource.org/2010/08/02/spring-security-in-google-app-engine/"><em>Read more...</em></a>]]></description>
		<wfw:commentRss>http://blog.springsource.org/2010/08/02/spring-security-in-google-app-engine/feed/</wfw:commentRss>
		<slash:comments>38</slash:comments>
		</item>
		<item>
		<title>SpringSource dm Server 2.0.1 Released</title>
		<link>http://blog.springsource.org/2010/04/01/springsource-dm-server-2-0-1-released/</link>
		<comments>http://blog.springsource.org/2010/04/01/springsource-dm-server-2-0-1-released/#comments</comments>
		<pubDate>Thu, 01 Apr 2010 11:56:56 +0000</pubDate>
		<dc:creator>Glyn Normington</dc:creator>
				<category><![CDATA[dm Server]]></category>
		<category><![CDATA[Java]]></category>
		<category><![CDATA[Open Source]]></category>
		<category><![CDATA[OSGi]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[SpringSource]]></category>
		<category><![CDATA[dm server]]></category>
		<category><![CDATA[virgo]]></category>

		<guid isPermaLink="false">http://blog.springsource.com/?p=4583</guid>
		<description><![CDATA[SpringSource dm Server 2.0.1 is released today. The release fixes a few minor bugs and one security issue. The Admin Console&#039;s version of dojo is upgraded from 1.3.2 to 1.3.3 to prevent an open redirect attack. The release also includes the final Reference Implementation of the OSGi Web Container. The OSGi Web Container specification was  <a href="http://blog.springsource.org/2010/04/01/springsource-dm-server-2-0-1-released/"><em>Read more...</em></a>]]></description>
		<wfw:commentRss>http://blog.springsource.org/2010/04/01/springsource-dm-server-2-0-1-released/feed/</wfw:commentRss>
		<slash:comments>3</slash:comments>
		</item>
		<item>
		<title>Behind the Spring Security Namespace</title>
		<link>http://blog.springsource.org/2010/03/06/behind-the-spring-security-namespace/</link>
		<comments>http://blog.springsource.org/2010/03/06/behind-the-spring-security-namespace/#comments</comments>
		<pubDate>Sat, 06 Mar 2010 21:38:37 +0000</pubDate>
		<dc:creator>Luke Taylor</dc:creator>
				<category><![CDATA[Java]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Spring]]></category>

		<guid isPermaLink="false">http://blog.springsource.com/?p=4091</guid>
		<description><![CDATA[With the introduction of the security schema in Spring Security 2, it became much easier to get a simple secured application up and running. In older versions, users had to declare and wire-up all the implementation beans individually, resulting in large and complicated Spring application context files which were difficult to understand and maintain. There  <a href="http://blog.springsource.org/2010/03/06/behind-the-spring-security-namespace/"><em>Read more...</em></a>]]></description>
		<wfw:commentRss>http://blog.springsource.org/2010/03/06/behind-the-spring-security-namespace/feed/</wfw:commentRss>
		<slash:comments>14</slash:comments>
		</item>
		<item>
		<title>Spring Security Kerberos/SPNEGO Extension</title>
		<link>http://blog.springsource.org/2009/09/28/spring-security-kerberos/</link>
		<comments>http://blog.springsource.org/2009/09/28/spring-security-kerberos/#comments</comments>
		<pubDate>Mon, 28 Sep 2009 07:42:07 +0000</pubDate>
		<dc:creator>Mike Wiesner</dc:creator>
				<category><![CDATA[3.0]]></category>
		<category><![CDATA[Java]]></category>
		<category><![CDATA[Open Source]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Spring]]></category>
		<category><![CDATA[Web]]></category>
		<category><![CDATA[Kerberos]]></category>
		<category><![CDATA[SPNEGO]]></category>

		<guid isPermaLink="false">http://blog.springsource.com/?p=2756</guid>
		<description><![CDATA[We&#039;re pleased to announce that the first milestone of the Spring Security Kerberos Extension is now available for download. The release is also available through the Maven milestone repository at http://maven.springframework.org/milestone. With the Spring Security Kerberos Extension, your users are authenticated against your web application just by opening the URL. There is no need to  <a href="http://blog.springsource.org/2009/09/28/spring-security-kerberos/"><em>Read more...</em></a>]]></description>
		<wfw:commentRss>http://blog.springsource.org/2009/09/28/spring-security-kerberos/feed/</wfw:commentRss>
		<slash:comments>81</slash:comments>
		</item>
		<item>
		<title>Exploring Roo&#039;s Architecture</title>
		<link>http://blog.springsource.org/2009/06/18/roo-part-3/</link>
		<comments>http://blog.springsource.org/2009/06/18/roo-part-3/#comments</comments>
		<pubDate>Thu, 18 Jun 2009 13:29:52 +0000</pubDate>
		<dc:creator>Ben Alex</dc:creator>
				<category><![CDATA[3.0]]></category>
		<category><![CDATA[AOP]]></category>
		<category><![CDATA[Data Access]]></category>
		<category><![CDATA[Java]]></category>
		<category><![CDATA[Open Source]]></category>
		<category><![CDATA[Roo]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Spring]]></category>
		<category><![CDATA[Testing]]></category>
		<category><![CDATA[Tools]]></category>
		<category><![CDATA[Web]]></category>

		<guid isPermaLink="false">http://blog.springsource.com/?p=2261</guid>
		<description><![CDATA[Last month we discovered how easy it is to build a fully-fledged enterprise application in just a few minutes using Spring Roo &#8211; our new productivity tool for Java developers. While many Java developers have already started evaluating Roo to help save time on their projects, I&#039;ve received a lot of questions from people curious  <a href="http://blog.springsource.org/2009/06/18/roo-part-3/"><em>Read more...</em></a>]]></description>
		<wfw:commentRss>http://blog.springsource.org/2009/06/18/roo-part-3/feed/</wfw:commentRss>
		<slash:comments>36</slash:comments>
		</item>
		<item>
		<title>Spring Security 3.0.0.M1 Released</title>
		<link>http://blog.springsource.org/2009/06/03/spring-security-300m1-released/</link>
		<comments>http://blog.springsource.org/2009/06/03/spring-security-300m1-released/#comments</comments>
		<pubDate>Wed, 03 Jun 2009 05:00:09 +0000</pubDate>
		<dc:creator>Luke Taylor</dc:creator>
				<category><![CDATA[Java]]></category>
		<category><![CDATA[Open Source]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Spring]]></category>

		<guid isPermaLink="false">http://blog.springsource.com/?p=2115</guid>
		<description><![CDATA[We&#039;re pleased to announce that the first milestone of Spring Security 3.0 is now available for download. The release is also available through the Maven milestone repository at http://maven.springframework.org/milestone. As with Spring 3.0, this is the first release which requires a minimum JDK 1.5 to run and also require Spring 3.0, so you should get  <a href="http://blog.springsource.org/2009/06/03/spring-security-300m1-released/"><em>Read more...</em></a>]]></description>
		<wfw:commentRss>http://blog.springsource.org/2009/06/03/spring-security-300m1-released/feed/</wfw:commentRss>
		<slash:comments>34</slash:comments>
		</item>
		<item>
		<title>Getting Started with Spring Roo</title>
		<link>http://blog.springsource.org/2009/05/27/roo-part-2/</link>
		<comments>http://blog.springsource.org/2009/05/27/roo-part-2/#comments</comments>
		<pubDate>Wed, 27 May 2009 08:58:16 +0000</pubDate>
		<dc:creator>Ben Alex</dc:creator>
				<category><![CDATA[3.0]]></category>
		<category><![CDATA[Data Access]]></category>
		<category><![CDATA[Java]]></category>
		<category><![CDATA[Open Source]]></category>
		<category><![CDATA[Roo]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Spring]]></category>
		<category><![CDATA[Tools]]></category>
		<category><![CDATA[Web]]></category>

		<guid isPermaLink="false">http://blog.springsource.com/?p=1984</guid>
		<description><![CDATA[Update: The third installment of the &#034;Introducing Spring Roo&#034; blog series is now available and covers Roo&#039;s internal architecture in detail. I have a confession to make. While many of you would know I&#039;ve been busily working away on Spring Roo in recent months, I also have a separate project that hasn&#039;t made it into  <a href="http://blog.springsource.org/2009/05/27/roo-part-2/"><em>Read more...</em></a>]]></description>
		<wfw:commentRss>http://blog.springsource.org/2009/05/27/roo-part-2/feed/</wfw:commentRss>
		<slash:comments>39</slash:comments>
		</item>
	</channel>
</rss>

