Spring Boot Security Expert
Implements industry-standard security protocols and defensive coding practices for Java Spring Boot applications.
The Spring Boot Security skill equips Claude with specialized knowledge to architect and audit secure Java applications. It focuses on implementing stateless JWT authentication, role-based access control (RBAC), and robust input validation using Bean Validation. By enforcing 'deny-by-default' policies and providing patterns for SQL injection prevention, CSRF protection, and secure header configuration, this skill ensures that backend services are hardened against common vulnerabilities while maintaining high performance and scalability.
主な機能
01Stateless JWT and OAuth2 authentication patterns
02Production-grade CORS, CSRF, and Security Header configurations
03Secret management best practices using Vault and environment variables
04Automated input validation and SQL injection prevention
05112,917 GitHub stars
06Method-level security using @PreAuthorize and RBAC
ユースケース
01Configuring rate limiting and brute-force protection for sensitive endpoints
02Implementing secure session management and token-based authentication
03Hardening a REST API against OWASP Top 10 vulnerabilities