# ali-bouali/spring-boot-3-jwt-security

Sample project on how to implement JWT security based using Spring boot 3 and Spring security 6

Repository: https://github.com/ali-bouali/spring-boot-3-jwt-security
Canonical: https://ross.abutalabs.com/products/spring-boot-3-jwt-security
Homepage: https://aliboucoding.com/p/securing-your-spring-boot-3-0-applications-with-json-web-tokens-jwt
Language: Java
License: Apache-2.0
License Family: permissive
Topics: authentication, docker, docker-compose, intellij-idea, jwt, jwt-authentication, postgressql, spring-boot, spring-security
Last push: 2024-07-01T16:58:29+00:00

## Health v2 (maintenance only)
Score: 31/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 0, release rhythm 35, longevity 95
- inputs: {"age_days": 1343, "days_push": 793, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 2036, forks 925 (observed 2026-08-28T04:06:08.004824+00:00)

## What it is
A sample Java project demonstrating JWT-based authentication and role-based authorization with Spring Boot 3 and Spring Security 6. It includes user registration, login, refresh tokens, logout, BCrypt password encryption, and Docker Compose setup with PostgreSQL.

## Use cases
- implement jwt authentication in spring boot 3
- learn spring security 6 with jwt
- add refresh token and logout to a spring boot app
- role-based authorization example in spring boot
- secure a rest api with  web tokens
- spring boot jwt starter template with postgres and docker

## When to choose
- starting a new Spring Boot 3 API that needs JWT auth
- learning how Spring Security 6 filter chains and JWT filters fit together
- wanting a working reference for refresh tokens and role-based access

## When to avoid
- you need production-hardened security rather than a teaching sample
- your stack is not Java/Spring
- you need OAuth2/social login or SSO out of the box

## Facets
- artifact type: learning-resource
- maturity: stable
- function: auth, authorization, security
- domain: security, backend, web-development, tutorials
- platform: jvm, self-hosted
- tags: spring-boot, spring-security, jwt, jwt-authentication, refresh-token, bcrypt, sample-project, boilerplate, docker

## Member repositories
- ali-bouali/spring-boot-3-jwt-security (main) score 31

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:06:08.004824+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T02:59:19.095208+00:00, confidence not recorded.
  - readme: https://github.com/ali-bouali/spring-boot-3-jwt-security (fetched 2026-08-28T04:06:08.004824+00:00, sha ca4794a1a2ea)
  - homepage: https://aliboucoding.com/p/securing-your-spring-boot-3-0-applications-with-json-web-tokens-jwt (fetched 2026-08-29T10:38:51.240842+00:00, sha 228a27bbc7d7)
- Data as of 2026-08-30T08:39:29.467469+00:00.