Spring security

Overview

Spring Security is a powerful and highly customizable authentication and access-control framework. It is the de-facto standard for securing Spring-based applications.
Spring Security is a framework that focuses on providing both authentication and authorization to Java applications. Like all Spring projects, the real power of Spring Security is found in how easily it can be extended to meet custom requirements

Features

Comprehensive and extensible support for both Authentication and Authorization

Protection against attacks like session fixation, clickjacking, cross site request forgery, etc

Servlet API integration

Optional integration with Spring Web MVC

Much more…

Support

Branch Initial Release End of Support End Commercial Support *
5.6.x 2021-11-15 2022-11-15 2024-03-15
5.5.x 2021-05-18 2022-05-18 2023-09-18
5.4.x 2020-09-09 2021-12-31 2023-04-30

Getting Start

https://docs.spring.io/spring-security/reference/getting-spring-security.html

Gradle

dependencies {
	compile "org.springframework.boot:spring-boot-starter-security"
}

You can override the spring security version for providing a Maven property

ext['spring-security.version']='5.6.2'

You may need to update the version of Spring Framework as well

ext['spring.version']='5.3.16'

Repositories

GA(General Availability) Release

repositories {
	mavenCentral()
}

Snapshot

repositories {
	maven { url 'https://repo.spring.io/snapshot' }
}

Milestone

repositories {
	maven { url 'https://repo.spring.io/milestone' }
}

Maven

<dependencies>
	<!-- ... other dependency elements ... -->
	<dependency>
		<groupId>org.springframework.boot</groupId>
		<artifactId>spring-boot-starter-security</artifactId>
	</dependency>
</dependencies> 

<properties>
	<!-- ... -->
	<spring-security.version>5.6.2</spring-security.version>
</properties>

<properties>
	<!-- ... -->
	<spring.version>5.3.16</spring.version>
</properties>

Spring Security Architecture

https://spring.io/guides/topicals/spring-security-architecture