backend-spring-security

What problem does it solve?

This Skill helps you review Spring Security configuration for mistakes that weaken authentication and authorization, such as unsafe defaults, missing protections, and overly broad access rules.

Core Features & Use Cases

• Security filter chain review: Checks SecurityFilterChain configuration for deliberate authorization rules, CSRF handling, CORS setup, session policy, and logout behavior.
• Authentication hardening: Validates password encoding, authentication providers, JWT or OAuth2 wiring, and safe login or session flows.
• Method-level protection: Reviews PreAuthorize and PostAuthorize usage for sensitive service operations that should not rely on URL rules alone.
• Use case: Use this Skill when auditing a Spring Boot application before release to catch security gaps that could expose private endpoints or weaken browser-based protections.

Quick Start

Review the Spring Security configuration in my Spring Boot project and identify any unsafe authentication, authorization, CSRF, CORS, session, or token-validation settings.