spring-security

Configure Spring SecurityFilterChain with JWT validation and OAuth2 resource server.

1|Updated Feb 11, 2026
One-click install
npx skills add https://github.com/jander99/skills --skill spring-security-jander99
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: spring-security
Source: https://github.com/jander99/skills/tree/main/skills/spring-security
Command: npx skills add https://github.com/jander99/skills --skill spring-security-jander99

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Centralize and standardize securing Spring REST APIs by providing a comprehensive configuration approach that covers authentication, authorization, and auditing.

Core Features & Use Cases

  • Modern SecurityFilterChain setup with lambda DSL
  • JWT validation and OAuth2 resource server configuration
  • Method-level security with @PreAuthorize and @Secured
  • CORS policy configuration and security headers
  • Security auditing and integration tests for verification
  • Migration guidance from deprecated WebSecurityConfigurerAdapter

Quick Start

Configure a SecurityFilterChain for a REST API using JWT validation, OAuth2 resource server, and method security.

Frequently Asked Questions about spring-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I configure a SecurityFilterChain for a Spring Boot REST API?▼

Configure a Spring Boot REST API SecurityFilterChain using a modern lambda DSL blueprint that wires JWT validation, OAuth2 resource server integration, and method-level security for standardized endpoint protection.

What is the best way to secure Spring APIs using JWT validation and OAuth2?▼

Secure Spring APIs by configuring an OAuth2 resource server with JWT validation, applying @PreAuthorize method security, and defining explicit CORS policies alongside security headers for comprehensive endpoint protection.

How do I migrate from WebSecurityConfigurerAdapter to modern Spring Security configuration?▼

Migrate from WebSecurityConfigurerAdapter by adopting the SecurityFilterChain bean setup with lambda DSL, replacing deprecated inheritance-based configuration with declarative component wiring for modern Spring Boot REST services.

Can I use method security with @PreAuthorize and @Secured in a Spring Boot REST service?▼

Yes, apply method security using @PreAuthorize and @Secured in a Spring Boot REST service to enforce endpoint-level authorization rules directly alongside your centralized SecurityFilterChain configuration.

Does Spring Security configuration support CORS policy and security headers setup?▼

Yes, Spring Security configuration supports CORS policy and security headers setup, enabling you to define cross-origin resource sharing rules and secure HTTP responses within your centralized SecurityFilterChain blueprint.

How do I test Spring Security JWT validation and security auditing configurations?▼

Test Spring Security JWT validation and security auditing by writing integration tests that verify your SecurityFilterChain, OAuth2 resource server setup, and method security rules function correctly across REST endpoints.