spring-boot-security

name	spring-boot-security
description	Spring Security 7 implementation for Spring Boot 4. Use when configuring authentication, authorization, OAuth2/JWT resource servers, method security, or CORS/CSRF. Covers the mandatory Lambda DSL migration, SecurityFilterChain patterns, @PreAuthorize, and password encoding. For testing secured endpoints, see spring-boot-testing skill.

Spring Security 7 for Spring Boot 4

Implements authentication and authorization with Spring Security 7's mandatory Lambda DSL.

Critical Breaking Changes

Removed API	Replacement	Status
and() method	Lambda DSL closures	Required
authorizeRequests()	authorizeHttpRequests()	Required
antMatchers()	requestMatchers()	Required
WebSecurityConfigurerAdapter	SecurityFilterChain bean	Required
@EnableGlobalMethodSecurity	@EnableMethodSecurity	Required

Core Workflow

1. Create SecurityFilterChain bean → Configure with Lambda DSL
2. Define authorization rules → authorizeHttpRequests() with requestMatchers()
3. Configure authentication → Form login, HTTP Basic, or OAuth2
4. Add method security → +