spring-security

Configure Spring SecurityFilterChain with JWT validation and OAuth2 resource server.

1|Updated Feb 11, 2026
One-click install
npx skills add https://github.com/jander99/skills --skill spring-security-jander99
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: spring-security
Source: https://github.com/jander99/skills/tree/main/skills/spring-security
Command: npx skills add https://github.com/jander99/skills --skill spring-security-jander99

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Centralize and standardize securing Spring REST APIs by providing a comprehensive configuration approach that covers authentication, authorization, and auditing.

Core Features & Use Cases

  • Modern SecurityFilterChain setup with lambda DSL
  • JWT validation and OAuth2 resource server configuration
  • Method-level security with @PreAuthorize and @Secured
  • CORS policy configuration and security headers
  • Security auditing and integration tests for verification
  • Migration guidance from deprecated WebSecurityConfigurerAdapter

Quick Start

Configure a SecurityFilterChain for a REST API using JWT validation, OAuth2 resource server, and method security.

Frequently Asked Questions about spring-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I configure a SecurityFilterChain for a Spring Boot REST API?

Configure a Spring Boot REST API SecurityFilterChain using a modern lambda DSL blueprint that wires JWT validation, OAuth2 resource server integration, and method-level security for standardized endpoint protection.

What is the best way to secure Spring APIs using JWT validation and OAuth2?

Secure Spring APIs by configuring an OAuth2 resource server with JWT validation, applying @PreAuthorize method security, and defining explicit CORS policies alongside security headers for comprehensive endpoint protection.

How do I migrate from WebSecurityConfigurerAdapter to modern Spring Security configuration?

Migrate from WebSecurityConfigurerAdapter by adopting the SecurityFilterChain bean setup with lambda DSL, replacing deprecated inheritance-based configuration with declarative component wiring for modern Spring Boot REST services.

Can I use method security with @PreAuthorize and @Secured in a Spring Boot REST service?

Yes, apply method security using @PreAuthorize and @Secured in a Spring Boot REST service to enforce endpoint-level authorization rules directly alongside your centralized SecurityFilterChain configuration.

Does Spring Security configuration support CORS policy and security headers setup?

Yes, Spring Security configuration supports CORS policy and security headers setup, enabling you to define cross-origin resource sharing rules and secure HTTP responses within your centralized SecurityFilterChain blueprint.

How do I test Spring Security JWT validation and security auditing configurations?

Test Spring Security JWT validation and security auditing by writing integration tests that verify your SecurityFilterChain, OAuth2 resource server setup, and method security rules function correctly across REST endpoints.