Spring Boot FAQ: Top Questions
27. How do you secure a Spring Boot REST API using Spring Security?
Spring Boot integrates with Spring Security to provide comprehensive security for REST APIs using configurations and annotations.
πΊοΈ Steps:
- Add
spring-boot-starter-security
. - Define a
SecurityFilterChain
or extendWebSecurityConfigurerAdapter
.
π₯ Example:
@Bean
public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
http.csrf().disable()
.authorizeHttpRequests()
.requestMatchers("/api/public").permitAll()
.anyRequest().authenticated()
.and()
.httpBasic();
return http.build();
}
π Expected Output:
/api/public is open, others require authentication.
π οΈ Use Cases:
- Role-based access control.
- JWT or basic auth integration.