Security
Reference for the security features of Vaadin Flow.
This section is the reference for securing a Vaadin Flow application: authenticating users, controlling which views they can access, and the protections that Flow provides against common attacks. For task-oriented guides that build on it, see Building Apps > Security.
Flow works with the common security frameworks of the Java ecosystem, such as Spring Security, Java Authentication and Authorization Service (JAAS), and Apache Shiro. Its built-in security helpers are mainly intended to be used with Spring Security, but some of them, such as view access control, also work in plain servlet applications.
Topics
- View Access Control
- Controlling which users can navigate to which views.
- Spring Applications
- Securing a Vaadin Flow application with Spring Security, using the built-in security helpers.
- Plain Servlet Applications
- Reference for securing Vaadin applications that don't use Spring.
- Built-in Protections & Hardening
- How Vaadin Flow protects applications, and how to harden them further.
- Security Process at Vaadin
- How Vaadin releases security fixes, handles reported issues, and keeps third-party libraries up to date.
D23C116F-2ABD-425F-A604-7F2F69A52616