mcpField
S
spring-security

spring-security

github.com/full-stack-skillsSecurity3192 installsUpdated 4w ago
Repository

About spring-security

A skill guide for Spring Security developers covering authentication, authorization, and common security configuration, with practical security recommendations.

Key features

  1. 01Configure SecurityFilterChain and user services
  2. 02Handle login, logout, and exceptions
  3. 03Integrate JWT and OAuth2
  4. 04Configure method security, CSRF, and CORS
  5. 05Review password, session, and cookie safety

Use cases

  1. 01Set up authentication and authorization in Spring apps
  2. 02Add an OAuth2 client or resource server
  3. 03Configure method-level permissions and CSRF protection

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/full-stack-skills/spring-skills --skill spring-security

After installing, type/spring-securityin Claude Code to confirm it loaded.

Bundled filesagents/openai.yamlLICENSE.txt

Details

From the project README

When to use this skill

Use this skill whenever the user wants to:

  • 用 Spring Security 配置认证、授权、会话与安全头
  • 集成 OAuth2、JWT、方法安全与 CSRF

How to use this skill

  1. 配置：SecurityFilterChain、UserDetailsService、PasswordEncoder；登录/登出与异常处理。
  2. 进阶：JWT、OAuth2 客户端/资源服务器；@PreAuthorize、CORS。
  3. 参考：https://docs.spring.io/spring-security/reference/

Best Practices

  • 密码加密、会话与 Cookie 安全；最小权限与角色设计。
  • 生产用 HTTPS 与安全头；敏感路径保护。

Keywords

spring security, 认证, 授权, JWT, OAuth2

Comments

Markdown supported