spring-projects/spring-security
Spring Security observed · 2026-08-28
Health v2 · maintenance only
99/100
- Activity 99
- Release rhythm 98
- Longevity 100
Flags: no_readme
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-03. Adoption (stars, forks) is never an input.
- gap_med: 0.0
- age_days: 5349
- days_rel: 13
- days_push: 7
- n_releases_24m: 49
Adoption not part of the score
9612 stars · 6332 forks observed · 2026-08-28
What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded
Spring Security is a powerful and highly customizable authentication and access-control framework for Java applications, and the de-facto standard for securing Spring-based apps. It provides comprehensive, extensible support for authentication and authorization, plus protection against common attacks like CSRF, session fixation, and clickjacking.
Use cases
- add login and authentication to a Spring Boot application
- secure REST API endpoints with role-based access control
- protect a web app against CSRF and session fixation attacks
- integrate OAuth2 or JWT-based authentication in Java
- secure reactive WebFlux applications
- customize user authentication with a custom UserDetailsService
- add a default login page and generated credentials to a Spring Boot app
When to choose
- you are building a Spring or Spring Boot application and need authentication and authorization
- you want battle-tested protection against common web vulnerabilities out of the box
- you need fine-grained, extensible security configuration for servlet or reactive apps
- you want the de-facto standard Java security framework with long-term community and enterprise support
When to avoid
- your project does not use the Spring ecosystem, where lighter-weight alternatives may fit better
- you need a standalone identity provider or SSO server rather than an in-application security layer
- you want a zero-configuration security solution without learning Spring's configuration model
Facets
framework · maturity stable
auth authorization security middleware web-framework security backend web-development developer-tools jvm cross-platform spring-boot servlet webflux oauth2 session-management csrf-protection enterprise spring
7 sources
- homepage: http://spring.io/projects/spring-security · fetched 2026-08-29 · fdc71b43742f
- site_page: https://spring.io/quickstart · fetched 2026-08-29 · fc64dd950363
- site_page: https://spring.io/projects/spring-restdocs · fetched 2026-08-29 · 1e2a101b77d3
- site_page: https://docs.spring.io/spring-security/reference/servlet/getting-started.html · fetched 2026-08-29 · bd87f056df6e
- site_page: https://docs.spring.io/spring-security/reference/reactive/getting-started.html · fetched 2026-08-29 · fd026732cdd4
- site_page: https://enterprise.spring.io · fetched 2026-08-29 · 85ac7d6d5114
- site_page: https://enterprise.spring.io/lts-releases · fetched 2026-08-29 · 3251cc8760b6
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| spring-projects/spring-security | main | 99 |
For agents
markdown · JSON · MCP: product_card(name="spring-projects/spring-security")
Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem