Spring Security

Conventions for securing Spring Boot 3.2+ applications with Spring Security 6.2+. Uses the component-based SecurityFilterChain approach — WebSecurityConfigurerAdapter was removed in 6.0.

Do NOT Load for general Spring Boot development without security concerns.

SecurityFilterChain

Every security configuration is a @Bean returning SecurityFilterChain:

@Configuration
@EnableMethodSecurity
class SecurityConfig {