Does this skill support the old and() chaining method?

No, Spring Security 7 makes the Lambda DSL mandatory. This skill specifically helps you transition away from the deprecated and() chaining to modern closure-based configurations.

How do I handle CORS and CSRF with this skill?

The skill provides patterns for configuring CORS for cross-origin requests and setting up CSRF protection specifically tailored for Single Page Applications (SPAs) using CookieCsrfTokenRepository.

Does it handle password encryption?

Yes, it implements modern password hashing standards like Argon2 using the latest Spring Security 7 defaults to ensure secure credential storage.

Can I use this for JWT-based stateless authentication?

Yes, the skill includes specialized patterns for configuring JWT and OAuth2 resource servers, which are the standard for modern stateless REST APIs.

What is the replacement for WebSecurityConfigurerAdapter?

In Spring Security 7 and this skill, security is configured by defining a SecurityFilterChain bean, which provides more flexibility and better integration with the Spring context.

Spring Boot Security Implementation

Name: Spring Boot Security Implementation
Author: joaquimscosta

byjoaquimscosta

•

Seguridad y Pruebas

Implements secure authentication and authorization patterns for Spring Boot 4 using Spring Security 7's mandatory Lambda DSL.

This skill streamlines the implementation and migration of security configurations in Spring Boot 4 applications. It provides Claude with the specialized knowledge required to handle Spring Security 7's breaking changes, such as the mandatory shift to Lambda DSL, the transition from WebSecurityConfigurerAdapter to SecurityFilterChain beans, and the adoption of @EnableMethodSecurity. It is ideal for developers building modern REST APIs, OAuth2 resource servers, or session-based web applications who need to ensure their security architecture follows the latest industry best practices and avoids deprecated anti-patterns.

Características Principales

01Modern CORS and CSRF protection for SPAs and REST APIs

02Mandatory Lambda DSL configuration for SecurityFilterChain

033 GitHub stars

04Method-level security using @PreAuthorize and SpEL

05OAuth2 and JWT resource server implementation patterns

06Argon2 password encoding and secure credential handling

Casos de Uso

01Configuring fine-grained method-level authorization for business logic

02Implementing stateless JWT authentication for microservices

03Migrating legacy Spring Security configurations to Spring Boot 4 standards

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add joaquimscosta/arkhe-claude-plugins spring-boot-security

For use in Claude.ai and ChatGPT

Download Skill