--- title: Spring Security News & Updates | daily.dev description: Spring Security news and updates covering the security framework for Spring applications. Readers can learn about the filter chain and configuration, authentication providers and OAuth2 support, method-level authorization, CSRF and session handling, migration across major versions. canonical: https://daily.dev/tags/spring-security twitter:card: summary_large_image twitter:site: @dailydotdev og:url: https://daily.dev/tags/spring-security og:type: website og:site_name: daily.dev og:title: Spring Security News & Updates | daily.dev og:description: Spring Security news and updates covering the security framework for Spring applications. Readers can learn about the filter chain and configuration, authentication providers and OAuth2 support, method-level authorization, CSRF and session handling, migration across major versions. og:image: https://api.daily.dev/og/tags/spring-security.png og:image:width: 1200 og:image:height: 630 --- ## Roadmaps [Comprehensive roadmap for Spring SecurityBy roadmap.sh](https://roadmap.sh/java?ref=dailydev) ## Recommended Spring Security stories ## Who to follow for Spring Security [](https://daily.dev/ashutoshkrris) [Ashutosh Krishna](https://daily.dev/ashutoshkrris) [@ashutoshkrris](https://daily.dev/ashutoshkrris) Joined Nov 25\. 2021 630 Software Engineer | Backend Systems | Java, Spring Boot & Cloud ## Top sources covering Spring Security ## Most upvoted Spring Security posts ## Best discussed Spring Security posts ## All posts about Spring Security ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@graph":[{"@type":"CollectionPage","@id":"https://daily.dev/tags/spring-security#page","url":"https://daily.dev/tags/spring-security","name":"Spring Security News & Updates","description":"Spring Security news and updates covering the security framework for Spring applications. Readers can learn about the filter chain and configuration, authentication providers and OAuth2 support, method-level authorization, CSRF and session handling, migration across major versions.","isPartOf":{"@type":"WebSite","url":"https://daily.dev"}},{"@type":"ItemList","@id":"https://daily.dev/tags/spring-security#items","numberOfItems":10,"itemListElement":[{"@type":"ListItem","position":1,"url":"https://daily.dev/posts/how-to-implement-an-oauth2-resource-server-with-spring-security-d5y9pmopr","name":"How to Implement an OAuth2 Resource Server with Spring Security"},{"@type":"ListItem","position":2,"url":"https://daily.dev/posts/a-bootiful-podcast-daniel-garnier-moiroux-on-passkeys-and-spring-security-wtaa0wjue","name":"A Bootiful Podcast: Daniel Garnier-Moiroux on Passkeys and Spring Security"},{"@type":"ListItem","position":3,"url":"https://daily.dev/posts/proof-key-for-code-exchange-pkce-in-web-applications-with-spring-security-pt1andvh7","name":"Proof Key for Code Exchange (PKCE) in Web Applications with Spring Security"},{"@type":"ListItem","position":4,"url":"https://daily.dev/posts/securing-spring-boot-3-applications-with-spring-security-6-1-and-beyond-enxwjwmal","name":"Securing Spring Boot 3 Applications with Spring Security 6.1 and Beyond"},{"@type":"ListItem","position":5,"url":"https://daily.dev/posts/spring-framework-day-30-review-and-continuing-your-spring-journey-6yltsuoe4","name":"Spring Framework: Day 30 – Review and Continuing Your Spring Journey"},{"@type":"ListItem","position":6,"url":"https://daily.dev/posts/spring-framework-day-22-diving-deeper-into-spring-security-zoa8l8iul","name":"Spring Framework: Day 22 — Diving Deeper into Spring Security"},{"@type":"ListItem","position":7,"url":"https://daily.dev/posts/creating-a-spring-security-key-for-signing-a-jwt-token-wfv9frd7y","name":"Creating a Spring Security Key for Signing a JWT Token"},{"@type":"ListItem","position":8,"url":"https://daily.dev/posts/cve-2024-22257-possible-broken-access-control-in-spring-security-with-direct-use-of-authenticatedvo-wbs8ugya7","name":"CVE-2024-22257: Possible Broken Access Control in Spring Security With Direct Use of AuthenticatedVoter"},{"@type":"ListItem","position":9,"url":"https://daily.dev/posts/spring-security-6-3-0-m3-6-2-3-6-1-8-6-0-10-5-8-11-and-5-7-12-are-now-available-gdbyrha4p","name":"Spring Security 6.3.0-M3, 6.2.3, 6.1.8, 6.0.10, 5.8.11 and 5.7.12 are now available"},{"@type":"ListItem","position":10,"url":"https://daily.dev/posts/spring-security-authorizationmanager-mezozqmax","name":"Spring Security AuthorizationManager"}]},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Tags","item":"https://daily.dev/tags"},{"@type":"ListItem","position":3,"name":"Spring Security"}]}]} ```