Spring Boot Security Expert
Implements enterprise-grade security patterns for Java Spring Boot applications including authentication, authorization, and vulnerability mitigation.
This skill provides specialized guidance for securing Java Spring Boot services using industry-standard best practices. It assists developers in implementing stateless JWT authentication, fine-grained method-level authorization with Spring Security, robust input validation, and protection against common vulnerabilities like SQL injection and CSRF. Whether you are setting up security headers, managing sensitive secrets, or configuring rate limiting, this skill ensures your application follows a 'deny-by-default' security posture and adheres to modern compliance and safety standards.
主な機能
01Comprehensive authentication patterns using JWT and secure cookie management
02112,918 GitHub stars
03Fine-grained method-level authorization using @PreAuthorize and custom expressions
04Best practices for secret management, rate limiting, and dependency scanning
05Automated security header configuration including CSP and HSTS
06Robust input validation and SQL injection prevention strategies
ユースケース
01Configuring production-ready security headers and CSRF protection for web services
02Performing a security audit and implementing a 'deny-by-default' authorization model
03Building a secure REST API with stateless JWT-based authentication