springboot-security

Spring Boot Security Review Use when adding auth, handling input, creating endpoints, or dealing with secrets. When to Activate Adding authentication (JWT, OAuth2, session-based) Implementing authorization (@PreAuthorize, role-based access) Validating user input (Bean Validation, custom validators) Configuring CORS, CSRF, or security headers Managing secrets (Vault, environment variables) Adding rate limiting or brute-force protection Scanning dependencies for CVEs Authentication Prefer stateless JWT or opaque tokens with revocation list Use httpOnly , Secure , SameSite=Strict cookies for sessions Validate tokens with OncePerRequestFilter or resource server Show more Installs 1.6K Repository affaan-m/ecc GitHub Stars 239.2K First Seen May 19, 2026 Security Audits Gen Agent Trust Hub Pass Socket Pass Snyk Pass