Spring Security is a powerful and highly customizable authentication and access-control framework. It is the de-facto standard for securing Spring-based applications.

Spring Security is a framework that focuses on providing both authentication and authorization to Java applications. Like all Spring projects, the real power of Spring Security is found in how easily it can be extended to meet custom requirements

Features

• Comprehensive and extensible support for both Authentication and Authorization

• Protection against attacks like session fixation, clickjacking, cross site request forgery, etc

• Servlet API integration

• Optional integration with Spring Web MVC

• Much more…

Resources

• Getting Help

• Getting Spring Security

• Getting Started

  • Getting Started (Servlet)

  • Getting Started (WebFlux)

• Contributing