spring-security
Provides comprehensive guidance for Spring Security including authentication, authorization, OAuth2, JWT, and security best practices. Use when the user asks about Spring Security, needs to implement security in Spring applications, configure authentication, or work with security features.
Source facts
- Repository
- full-stack-skills/spring-skills
- Last source activity
- September 15, 2026 at 09:47
- Detected SKILL.md language
- Mixed languages
- Stars
- 2
- Forks
- 3
Install options
The review-first prompt is selected by default. You can switch to a direct command or download a local copy.
Review the source files
Read SKILL.md and any companion files shown by SkillsMP before deciding whether to install.
File Explorer
2 filesShowing SKILL.md
SKILL.md
Source instructions · Read-only preview- name
- spring-security
- description
- Provides comprehensive guidance for Spring Security including authentication, authorization, OAuth2, JWT, and security best practices. Use when the user asks about Spring Security, needs to implement security in Spring applications, configure authentication, or work with security features.
- license
- Apache-2.0
## When to use this skill
Use this skill whenever the user wants to:
- 用 Spring Security 配置认证、授权、会话与安全头
- 集成 OAuth2、JWT、方法安全与 CSRF
## How to use this skill
1. **配置**：SecurityFilterChain、UserDetailsService、PasswordEncoder；登录/登出与异常处理。
2. **进阶**：JWT、OAuth2 客户端/资源服务器；@PreAuthorize、CORS。
3. **参考**：https://docs.spring.io/spring-security/reference/
## Best Practices
- 密码加密、会话与 Cookie 安全；最小权限与角色设计。
- 生产用 HTTPS 与安全头；敏感路径保护。
## Keywords
spring security, 认证, 授权, JWT, OAuth2
View on GitHub