Week 10

Security Mindset

Threat Modeling Basics

Common Backend Vulnerabilities

Handling Sensitive Data

Hashing vs. Encryption

How to Store Passwords

Authentication & Authorization

Spring Security

Spring Security JWT authentication

Practice

Assignment

• Teachers

Backend Track

Week 10 Overview

So far you've focused on making your backend work. This week is about keeping it safe. Any backend application that handles user data, passwords, or money is a target, and a single weak spot can leak everything your users trusted you with. Security isn't something you add at the end — it's how you build. This week you'll learn to spot the most common backend weaknesses and protect your application against them.

You will also learn how a simple authentication and session management system works and what it means to be "logged in" to a system.

Learning goals

• Spot common backend security risks and think like an attacker
• Store passwords and sensitive data the safe way
• Add login and access control to your app with Spring Security

The HackYourFuture curriculum is licensed under CC BY-NC-SA 4.0 *https://hackyourfuture.net/*

Built with ❤️ by the HackYourFuture community · Thank you, contributors

Found a mistake or have a suggestion? Let us know in the feedback form.