The Definitive Guide to Security in Jakarta EE: Securing Java-based Enterprise Applications with Jakarta Security, Authorization, Authentication and More

Appendix A: Spring Security

What Is Spring Security?

Spring Security is a security framework that works especially well with the Spring Framework or Spring Web MVC and more recently Reactive applications using Spring Flux as well. Spring Security is a continuation of Acegi Security, a powerful security framework. But the problem was it required a lot of cumbersome XML configuration to realize it. Spring embraced it into the family from version 2.0 and, since then, refined it to its present state. Although the XML configuration is still possible, Spring’s new spirit of convention over configuration also influenced it the same way we also see in Jakarta EE. It is possible to perform all security configurations with annotation rather than XML, although ...