Securing Spring Boot Apps
The security filter chain, stateless APIs with JWT/OAuth2, method security, CORS/CSRF and hardening.
- 1✓
Explain Spring Security's architecture — the filter chain, SecurityContext, and how a request gets authenticated.
senior - 2✓
Design stateless API security with OAuth2/JWT. What does the resource server validate, and what are the classic JWT mistakes?
staff - 3✓
Method security: @PreAuthorize, SpEL, and designing authorization that scales past role checks.
staff - 4✓
CSRF and CORS: what does each actually protect against, and when do you disable CSRF?
senior - 5✓
Beyond auth: harden a Spring Boot service — the vulnerabilities you actively design against.
architect