Spring Boot Security Jwt
Solid JWT implementation for Spring Boot 3.5.x and Spring Security 6.x that covers the full authentication flow: token generation with JJWT 0.12.6, Bearer and HttpOnly cookie strategies, refresh token rotation, and method-level authorization with @PreAuthorize. You get concrete patterns for JwtService, OncePerRequestFilter setup, SecurityFilterChain configuration, and token revocation. Use this when you're building stateless auth for a REST API or SPA backend and need RBAC or permission-based access control. The skill includes OAuth2 integration patterns and database-backed user management. It assumes you want production-ready patterns, not just the happy path.
- skills.sh installs
- 4.3K
- GitHub stars
- 369
- last updated
- Aug 21, 2026
Install
$ npx -y skills add giuseppe-trisciuoglio/developer-kit --skill spring-boot-security-jwt --agent claude-codeInstalls into .claude/skills of the current project.
Files
Spring Boot JWT Security
JWT authentication and authorization patterns for Spring Boot 3.5.x using Spring Security 6.x and JJWT. Covers token generation, validation, refresh strategies, RBAC/ABAC, and OAuth2 integration.
Overview
This skill provides implementation patterns for stateless JWT authentication in Spring Boot applications. It covers the complete authentication flow including token generation with JJWT 0.12.6, Bearer/cookie-based authentication, refresh token rotation, and method-level authorization with @PreAuthorize expressions.
Key capabilities:
- Access and refresh token generation with configurable expiration
- Bearer token and HttpOnly cookie authentication strategies
- Integration with Spring Data JPA and OAuth2 providers
- RBAC with role/permission-based
@PreAuthorizerules - Token revocation and blacklisting for logout/rotation
When to Use
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageDetails
- Repository
- github.com/giuseppe-trisciuoglio/developer-kit
- Categories
- Backend & APIs, Security, Java & JVM, Databases
- First seen
- Apr 16, 2026
More from giuseppe-trisciuoglio/developer-kit
All 102- Spring Data Jpa4.2K
- Turborepo Monorepo4.2K
- Unit Test Boundary Conditions4.2K
- Spring Boot Openapi Documentation4.2K
- Drawio Logical Diagrams4.1K
- Clean Architecture4.1K
- Prompt Engineering4.1K
- Typescript Security Review4.1K
- Nextjs App Router4K
- Spring Boot Crud Patterns4K
- Chunking Strategy4K
- Spring Boot Event Driven Patterns4K
- Zod Validation Utilities4K
- Nestjs Best Practices4K
- Nestjs Code Review4K
- Spring Boot Cache4K
- Spring Boot Resilience4j3.9K
- Unit Test Service Layer3.9K
- Nextjs Code Review3.9K
- Spring Ai Mcp Server Patterns3.9K
- Unit Test Wiremock Rest Api3.9K
- Spring Boot Actuator3.9K
- Nextjs Authentication3.9K
- Spring Boot Dependency Injection3.9K
Recommended
More Backend & APIs
flowstudio-power-automate-mcpgithub/awesome-copilotFoundation skill for Power Automate via FlowStudio MCP — auth setup, the reusable MCP helper (Python + Node.js), tool discovery via `list_skills` / `tool_search4.2Kskills.sh installs
spring-boot-openapi-documentationgiuseppe-trisciuoglio/developer-kitProvides patterns to generate comprehensive REST API documentation using SpringDoc OpenAPI 3.0 and Swagger UI in Spring Boot 3.x applications. Use when setting 4.2Kskills.sh installs
react-mcpassistant-ui/skillsLets end users add, authenticate, and manage MCP servers from the browser in assistant-ui apps with @assistant-ui/react-mcp. Use when building user-managed MCP 4.2Kskills.sh installsobservabilityassistant-ui/skillsAdds tracing, telemetry, and observability to an assistant-ui backend. Use when wiring an AI SDK route handler (streamText/generateText, toUIMessageStream, crea4.2Kskills.sh installs
creating-mermaid-diagramsagents365-ai/365-skillsGenerate Mermaid diagrams (.mmd) and export to PNG/SVG/PDF using mmdc CLI or Kroki API. USE THIS SKILL when user mentions diagram, flowchart, sequence diagram, 4.2Kskills.sh installs
security-detection-rule-managementelastic/agent-skillsCreate, tune, and manage Elastic Security detection rules (SIEM and Endpoint). Use for false positives, exceptions, new coverage, noisy rules, or rule managemen4.1Kskills.sh installs