Java + React / Course in development
A login screen is
only the beginning.
Understand identity, enforce permissions and protect each user’s data. Start with a small decision that makes a big difference.
Try the free lesson ↓Full course, videos and pricing are coming later. No purchase required.
Free lesson / Interactive exercise
Would you allow this request?
This is a teaching simulation, not a live security test. No account or payment needed.
A visitor opens a private invoice
- IdentityNot signed in
- PermissionNot evaluated
- OwnershipNot evaluated
The planned learning path
From first request to secure system.
For developers comfortable with basic Java, React and HTTP. This curriculum is planned; the modules below are not released lessons.
01Identity before implementationPlanned
Authentication vs authorization, a threat model, and the request lifecycle.
02Connect Java and ReactPlanned
An established OIDC provider, sessions, sign-in, logout and expiry.
03Enforce access on the serverPlanned
Roles, permissions, resource ownership and tenant boundaries.
04Break it, then fix itPlanned
CSRF, XSS, CORS and adversarial authorization tests.
05Ship with confidencePlanned
Secrets, deployment, monitoring and a capstone security review.