What problem does it solve?
Protect Vaadin 25 applications from unauthorized access by providing a ready-to-use Spring Security integration, annotations, and logout flows.
Core Features & Use Cases
- View-level security using Vaadin and Jakarta annotations (@AnonymousAllowed, @PermitAll, @RolesAllowed, @DenyAll)
- Configurable login views and login forms using Vaadin's LoginForm
- OAuth2/OpenID Connect integration with providers like Google, Keycloak, and GitHub
- Secure logout and session management via AuthenticationContext or SecurityContextLogoutHandler
- Guidance for both development and production setups, including common pitfalls
Quick Start
Create a SecurityConfig that wires VaadinSecurityConfigurer.vaadin() and registers a LoginView with @Route("login", autoLayout = false) to enable authentication and secure access control.