spring-security
Spring Security framework for authentication and authorization
Implement conditional MFA in Spring Security 7: skip email OTT for OIDC providers like Google/Facebook, enforce password + OTT for username/password logins. Custom handlers, managers, and full code examples for provider-based security.
Fix 403 Forbidden for Swagger UI in Spring Boot by permitting /v3/api-docs/**, /swagger-ui/** and /webjars/** in Spring Security and handling CSRF for docs.
Fix Spring WebFlux JWT login returning 200: why failure handler is skipped and how to return 401 JSON. Let Spring Security handle login or map errors to 401.
Learn how to resolve Spring Security access denied errors when accessing root path '/' in Spring Boot applications with JSP views. Complete solutions and best practices.