Does it include a security checklist?

Yes, it features a comprehensive pre-release checklist covering tokens, headers, rate limiting, and dependency scanning to ensure your app is production-ready.

Does it support secrets management?

Absolutely. It provides guidance on externalizing sensitive credentials using environment variables or Spring Cloud Vault to keep secrets out of source control.

How does this skill help with authentication?

It provides standardized patterns for implementing stateless JWT and OAuth2 authentication, including secure cookie handling and OncePerRequestFilter implementations.

Can it help prevent SQL injection?

Yes, it enforces the use of Spring Data repositories and parameterized queries, providing specific examples of how to avoid dangerous string concatenation.

How is authorization handled in this skill?

It promotes method-level security using @PreAuthorize annotations and custom authorization logic to ensure granular, role-based access control across your service.

Spring Boot Security Pro

Name: Spring Boot Security Pro
Author: flatrick

byflatrick

0•

安全与测试

Enforces Spring Security best practices for authentication, authorization, and vulnerability mitigation in Java applications.

This skill provides comprehensive domain-specific guidance for securing Spring Boot services, covering critical areas like JWT authentication, role-based access control, input validation, and protection against common threats like SQL injection and CSRF. It helps developers implement secure-by-default configurations, manage sensitive secrets through environment variables or Vault, and maintain robust security headers and rate-limiting policies to ensure production-grade application safety throughout the development lifecycle.

主要功能

01Implementation of stateless JWT and OAuth2 authentication patterns

02Granular method-level authorization using @PreAuthorize and RBAC

030 GitHub stars

04Advanced protection against SQL injection, CSRF, and cross-site scripting

05Automated input validation and sanitization using Bean Validation

06Secure password hashing strategies using BCrypt and Argon2

使用场景

01Hardening Spring Boot applications against common OWASP vulnerabilities

02Securing REST APIs with JWT authentication and role-based access control

03Managing application secrets and environment variables for production environments

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add flatrick/mdt springboot-security

For use in Claude.ai and ChatGPT