This version is still in development and is not considered stable yet. For the latest stable version, please use Spring Security 6.0.0!

Spring Security

Spring Security is a framework that provides authentication, authorization, and protection against common attacks. With first class support for securing both imperative and reactive applications, it is the de-facto standard for securing Spring-based applications.

For a complete list of features, see the Features section of the reference.

Getting Started

If you are ready to start securing an application see the Getting Started sections for servlet and reactive. These sections will walk you through creating your first Spring Security applications.

If you want to understand how Spring Security works, you can refer to the Architecture section.

If you have any questions, there is a wonderful community that would love to help you!