spring-security-configuration

Generates Spring Security configuration classes with authentication, authorization, and HTTP protection setup.

Updated May 4, 2026
One-click install
npx skills add https://github.com/studenkov/FinanceTracker --skill spring-security-configuration-studenkov
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: spring-security-configuration
Source: https://github.com/studenkov/FinanceTracker/tree/main/.agents/skills/spring-security-configuration
Command: npx skills add https://github.com/studenkov/FinanceTracker --skill spring-security-configuration-studenkov

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve? Setting up Spring Security requires writing verbose configuration classes with correct DSL ordering, dependencies, and properties for each authentication type. This Skill generates a complete, correct @Configuration @EnableWebSecurity class tailored to your project, eliminating manual DSL wiring and version-specific guesswork. ## Core Features & Use Cases - Six authentication variants: Form Login (HTTP Session), JWT (OAuth2 Resource Server), OAuth2/OIDC Login, Authorization Server, LDAP, and Custom minimal configuration. - Project-aware generation: Reads language (Java/Kotlin), Spring Boot version, existing dependencies, and existing security configurations via the Spring MCP server to produce matching code. - Full stack output: Generates the filterChain DSL, beans, build-file dependencies (Boot 3.x/4.x aware), and application.properties entries with env-var placeholders for secrets. - Use Case: Ask to add JWT authentication to a REST API, and the Skill detects your Boot version, adds the resource-server dependency, writes the JWK Set URI property, and generates the SecurityFilterChain class. ## Quick Start Ask the assistant to create a Spring Security configuration with JWT authentication for your Spring Boot project.

Frequently Asked Questions about spring-security-configuration

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I create a Spring Security configuration class for a Spring Boot project?

This Skill generates a @Configuration @EnableWebSecurity class with a SecurityFilterChain bean containing the DSL for your chosen authentication type. It detects your language, Boot version, and dependencies via the Spring MCP server, then writes the class, dependencies, and properties.

How to configure JWT authentication in Spring Security?

Choose the JWT (OAuth2 Resource Server) variant, which adds the oauth2ResourceServer DSL, the resource-server dependency, and JWK Set URI properties. It optionally generates a JwtAuthenticationConverter for role mapping with Keycloak or AWS Cognito.

Does this support Spring Boot 4 and Kotlin?

Yes. The Skill auto-detects language (Java or Kotlin) and Boot version from the project summary, then selects matching code skeletons and dependency artifacts. Boot 4.x uses the renamed spring-boot-starter-security-oauth2-* artifacts.

What authentication types can Spring Security configuration cover?

Six variants are supported: Form Login with HTTP session, JWT resource server, OAuth2/OIDC login with providers like Keycloak and Google, Authorization Server (Boot 3.1+), LDAP, and a minimal Custom configuration with only common DSL blocks.

Why does the skill require the Amplicode IntelliJ plugin?

The Skill relies on Spring MCP tools exposed by the Amplicode plugin to read project summary, module dependencies, and existing security configurations. Without the MCP server connected, it cannot detect project context and will direct you to install the plugin first.

How are client secrets and passwords handled during generation?

Secrets are never requested or written into the conversation. The Skill emits environment variable placeholders such as ${OAUTH_*_CLIENT_SECRET} or ${LDAP_MANAGER_PASSWORD} into application.properties and tells you which env vars to set before running the app.