spring-boot-security

Spring Security 7's Lambda DSL lets you configure SecurityFilterChain beans with concise closures instead of XML or method chaining. Create a @Bean SecurityFilterChain method, use authorizeHttpRequests() with lambda expressions to set authorization rules, and enable @EnableMethodSecurity for annotation-based access control on service methods.

Yes. Lambda DSL supports configuring resource servers for both JWT and OAuth2 tokens. Define separate SecurityFilterChain beans for distinct security contexts—one for stateless API endpoints using oauth2ResourceServer() and another for web applications, each with appropriate requestMatchers and token validation.

Lambda DSL lets you configure CSRF and CORS inline within SecurityFilterChain. Disable CSRF for stateless APIs using csrf().disable(), enable it for form-based apps, and configure CORS with corsConfigurationSource(). Argon2 password encoding integrates as your PasswordEncoder bean for secure credential storage.

@EnableMethodSecurity annotation enables method-level authorization checks. Add @PreAuthorize expressions to service methods to restrict access based on roles or custom conditions. This works alongside SecurityFilterChain configuration for endpoint-level and service-method-level protection.

Yes. Lambda DSL is designed for REST APIs, web applications, and microservices. Configure stateless authentication with JWT or OAuth2 tokens, use requestMatchers for granular endpoint control, and apply method security for service-layer authorization across distributed systems.

You need Spring Boot 4, Spring Security 7, and familiarity with Java lambda expressions. Understand HTTP request matching patterns, authentication vs. authorization concepts, and your application's security requirements—whether stateless (APIs) or session-based (web apps).