Security
The best practices for securing applications, configuring security, authentication and role-based access control for views.
Hilla is a combined client and server programming model. As an application developer, you make a decision about how much of the application state is stored on the server and how much is stored in the user’s browser. The following sections describe the best practices for securing such applications.
Security topics that don’t depend on the frontend framework are documented only in the main Hilla documentation: Introduction, Accessing Auth Data, Offline Authentication, Stateless Authentication, and Best Practices.
Topics
- Controlling Endpoint Access
- How to specify the role-based access control rules as annotations for the endpoint class or its individual methods.
- Authentication with Spring Security
- Configuring authentication with Spring Security.
- Role-Based Access Control
- How to restrict access for selected Hilla views based on roles defined for the logged-in user.
- Session Expiration
- How to detect session expiration, for example to show a login view to the user.
- Common Vulnerabilities
- Dealing with vulnerabilities, such as SQL injection, cross-site request forgery, and Java serialization.