SherbyNet - /page/wikibook/entry.mu

Micron Document

<!DOCTYPE html>

<title>Spring Security</title>

</head>

<span id="openzim-page-title" class="mw-page-title-main"><span class="mw-page-title-main">Spring Security</span></span>

</h1>

</header>

/* start https://en.wikipedia.org/ */

.mw-parser-output .infobox-subbox{padding:0;border:none;margin:-3px;width:auto;min-width:100%;font-size:100%;clear:none;float:none;background-color:transparent}.mw-parser-output .infobox-3cols-child{margin:auto}.mw-parser-output .infobox .navbar{font-size:100%}@media screen{html.skin-theme-clientpref-night .mw-parser-output .infobox-full-data:not(.notheme)>div:not(.notheme)[style]{background:#1f1f23!important;color:#f8f9fa}}@media screen and (prefers-color-scheme:dark){html.skin-theme-clientpref-os .mw-parser-output .infobox-full-data:not(.notheme)>div:not(.notheme)[style]{background:#1f1f23!important;color:#f8f9fa}}@media(min-width:640px){body.skin--responsive .mw-parser-output .infobox-table{display:table!important}body.skin--responsive .mw-parser-output .infobox-table>caption{display:table-caption!important}body.skin--responsive .mw-parser-output .infobox-table>tbody{display:table-row-group}body.skin--responsive .mw-parser-output .infobox-table th,body.skin--responsive .mw-parser-output .infobox-table td{padding-left:inherit;padding-right:inherit}}

/* end https://en.wikipedia.org/ */

</style><table class="infobox vevent"><tbody><tr><th colspan="2" class="infobox-above summary">Spring Security</th></tr><tr><th scope="row" class="infobox-label" style="white-space: nowrap;"><a href="Programmer" title="Programmer">Developer(s)</a></th><td class="infobox-data">4</td></tr><tr style="display: none;"><td colspan="2" class="infobox-full-data"></td></tr><tr><th scope="row" class="infobox-label" style="white-space: nowrap;"><a href="Software_release_life_cycle" title="Software release life cycle">Stable release</a></th><td class="infobox-data"><div style="margin:0px;">6.5.1

/ June 16, 2025<span style="display:none"> (<span class="bday dtstart published updated">2025-06-16</span>)</span> <sup id="cite_ref-1" class="reference"><a href="#cite_note-1"><span class="cite-bracket">[</span>1<span class="cite-bracket">]</span></a></sup></div></td></tr><tr style="display:none"><td colspan="2">

</td></tr><tr><th scope="row" class="infobox-label" style="white-space: nowrap;">Written in</th><td class="infobox-data"><a href="Java_(programming_language)" title="Java (programming language)">Java</a></td></tr><tr><th scope="row" class="infobox-label" style="white-space: nowrap;"><a href="Operating_system" title="Operating system">Operating system</a></th><td class="infobox-data"><a href="Cross-platform" class="mw-redirect" title="Cross-platform">Cross-platform</a></td></tr><tr><th scope="row" class="infobox-label" style="white-space: nowrap;"><a href="Software_categories#Categorization_approaches" title="Software categories">Type</a></th><td class="infobox-data"><a href="Web_application_framework" class="mw-redirect" title="Web application framework">web application framework</a> security</td></tr><tr><th scope="row" class="infobox-label" style="white-space: nowrap;"><a href="Software_license" title="Software license">License</a></th><td class="infobox-data"><a href="Apache_License" title="Apache License">Apache License</a> 2.0</td></tr><tr><th scope="row" class="infobox-label" style="white-space: nowrap;">Website</th><td class="infobox-data"><span class="url"><a rel="nofollow" class="external text" href="https://projects.spring.io/spring-security/">projects<wbr>.spring<wbr>.io<wbr>/spring-security<wbr>/</a></span></td></tr></tbody></table>

<p><b>Spring Security</b> is a <a href="Java_(programming_language)" title="Java (programming language)">Java</a>/<a href="Java_EE" class="mw-redirect" title="Java EE">Java EE</a> framework that provides <a href="Authentication" title="Authentication">authentication</a>, <a href="Authorization" title="Authorization">authorization</a> and other security features for enterprise applications. The project was started in late 2003 as 'Acegi Security' (pronounced <i>Ah-see-gee</i> <span class="rt-commentedText nowrap"><span class="IPA nopopups noexcerpt" lang="en-fonipa">/<span style="border-bottom:1px dotted"><span title="/ɑː/: 'a' in 'father'">ɑː</span><span title="'s' in 'sigh'">s</span><span title="/iː/: 'ee' in 'fleece'">iː</span><span title="/dʒ/: 'j' in 'jam'">dʒ</span><span title="/iː/: 'ee' in 'fleece'">iː</span></span>/</span></span>, whose letters are the first, third, fifth, seventh, and ninth characters from the <a href="English_alphabet" title="English alphabet">English alphabet</a>, in order to prevent name conflicts<sup id="cite_ref-2" class="reference"><a href="#cite_note-2"><span class="cite-bracket">[</span>2<span class="cite-bracket">]</span></a></sup>) by Ben Alex, with it being publicly released under the <a href="Apache_License" title="Apache License">Apache License</a> in March 2004. Subsequently, Acegi was incorporated into the <a href="Spring_Framework" title="Spring Framework">Spring</a> portfolio as Spring Security, an official Spring sub-project. The first public release under the new name was Spring Security 2.0.0 in April 2008, with commercial support and training available from <a href="SpringSource" class="mw-redirect" title="SpringSource">SpringSource</a>.

</p>

<div class="mw-heading mw-heading2"><h2 id="Authentication_flow">Authentication flow</h2></div>

<p>Diagram 1 shows the basic flow of an authentication request using the Spring Security system. It shows the different filters and how they interact from the initial browser request, to either a successful authentication or an <a href="HTTP_403" title="HTTP 403">HTTP 403</a> error.

</p><p><span class="mw-default-size" typeof="mw:File"></span>

</p>

<td colspan="2"><b>Browser submits</b> "<i>authentication credentials</i>"

</td></tr>

<tr>

<td colspan="2">"<i>Authentication mechanism</i>" <b>collects the details</b>

</td></tr>

<tr>

<td><b>An</b> "<i>authentication request</i>" <b>object is built</b>

</td></tr>

<tr>

<td><i>Authentication request</i> <b>sent to an AuthenticationManager</b>

</td></tr>

<tr>

<td><i>AuthenticationManager</i> (this is responsible for passing requests through a chain of <i>AuthenticationProviders</i>)

</td></tr>

<tr>

<td>"<i>Authentication provider</i>" will ask a <code>UserDetailsService</code> to provide a <code>UserDetails</code> object

</td></tr>

<tr>

<td>The resultant <code>UserDetails</code> object (which also contains the <i><code>GrantedAuthority[]s</code></i>) will be used to build the fully populated <code>Authentication</code> object.

</td></tr>

<tr>

<td colspan="2">If "<i>Authentication mechanism</i>" <b>receives</b> back the fully populated <code>Authentication</code> object, it will deem the request valid, put the <code>Authentication</code> into the <code>SecurityContextHolder</code>; and cause the original request to be retried.<br>If, on the other hand, the <code>AuthenticationProvider</code> rejected the request, the authentication mechanism will ask the user agent to retry.

</td></tr>

<tr>

<td colspan="2"><i><code>AbstractSecurityInterceptor</code></i> authorizes the regenerated request and throws Java exceptions. (Asks <code>AccessDecisionManager</code> for decision.)

</td></tr>

<tr>

<td colspan="2"><i><code>ExceptionTranslationFilter</code></i> translates the exceptions thrown by <i><code>AbstractSecurityInterceptor</code></i> into HTTP related error codes

</td></tr>

<tr>

<td>Error code 403 – if the principal has been authenticated and therefore simply lacks sufficient access<br>Launch an <code>AuthenticationEntryPoint</code> – if the principal has not been authenticated which is an authentication mechanism

</td></tr></tbody></table>

<div class="mw-heading mw-heading2"><h2 id="Key_authentication_features">Key authentication features</h2></div>

<ul><li><a href="Lightweight_Directory_Access_Protocol" title="Lightweight Directory Access Protocol">LDAP</a> (using both bind-based and password comparison strategies) for centralization of authentication information.<sup id="cite_ref-FOOTNOTEDeinumRubioLongMak2014_3-0" class="reference"><a href="#cite_note-FOOTNOTEDeinumRubioLongMak2014-3"><span class="cite-bracket">[</span>3<span class="cite-bracket">]</span></a></sup><sup class="reference nowrap"><span title="Pages: 358–362, §7-3">: 358–362, §7-3 </span></sup></li>

<li><a href="Single_sign-on" title="Single sign-on">Single sign-on</a> capabilities using the popular <a href="Central_Authentication_Service" title="Central Authentication Service">Central Authentication Service</a>.</li>

<li><a href="Java_Authentication_and_Authorization_Service" title="Java Authentication and Authorization Service">Java Authentication and Authorization Service</a> (JAAS) LoginModule, a standards-based method for authentication used within Java. Note this feature is only a delegation to a JAAS Loginmodule.<sup id="cite_ref-4" class="reference"><a href="#cite_note-4"><span class="cite-bracket">[</span>4<span class="cite-bracket">]</span></a></sup></li>

<li><a href="Basic_access_authentication" title="Basic access authentication">Basic access authentication</a> as defined through RFC 1945.</li>

<li><a href="Digest_access_authentication" title="Digest access authentication">Digest access authentication</a><sup id="cite_ref-FOOTNOTEDeinumRubioLongMak2014_3-1" class="reference"><a href="#cite_note-FOOTNOTEDeinumRubioLongMak2014-3"><span class="cite-bracket">[</span>3<span class="cite-bracket">]</span></a></sup><sup class="reference nowrap"><span title="Pages: 356–358, §7-3">: 356–358, §7-3 </span></sup> as defined through RFC 2617 and RFC 2069.</li>

<li><a href="X.509" title="X.509">X.509</a> <a href="Client_certificate" title="Client certificate">client certificate</a> presentation over the <a href="Secure_Sockets_Layer" class="mw-redirect" title="Secure Sockets Layer">Secure Sockets Layer</a> standard.</li>

<li><a href="CA%2C_Inc" class="mw-redirect" title="CA, Inc">CA, Inc</a> SiteMinder for authentication (a popular commercial access management product).</li>

<li><a href="Su_(Unix)" title="Su (Unix)">Su (Unix)</a>-like support for switching principal identity over a <a href="HTTP" title="HTTP">HTTP</a> or <a href="HTTPS" title="HTTPS">HTTPS</a> connection.</li>

<li>Run-as replacement, which enables an operation to assume a different security identity.</li>

<li>Anonymous authentication, which means that even unauthenticated principals are allocated a security identity.</li>

<li>Container adapter (custom realm) support for <a href="Apache_Tomcat" title="Apache Tomcat">Apache Tomcat</a>, <a href="Resin_Server" class="mw-redirect" title="Resin Server">Resin</a>, <a href="JBoss" class="mw-redirect" title="JBoss">JBoss</a> and <a href="Jetty_(web_server)" title="Jetty (web server)">Jetty (web server)</a>.</li>

<li>Windows <a href="NTLM" title="NTLM">NTLM</a> to enable browser integration (experimental).</li>

<li>Web form authentication, similar to the <a href="Servlet_container" class="mw-redirect" title="Servlet container">servlet container</a> specification.</li>

<li>"Remember-me" support via <a href="HTTP_cookie" title="HTTP cookie">HTTP cookies</a>.</li>

<li>Concurrent session support, which limits the number of simultaneous logins permitted by a principal.</li>

<li>Full support for customization and plugging in custom authentication implementations.</li></ul>

<div class="mw-heading mw-heading2"><h2 id="Key_authorization_features">Key authorization features</h2></div>

<ul><li><a href="AspectJ" title="AspectJ">AspectJ</a> method invocation authorization.</li>

<li><a href="HTTP" title="HTTP">HTTP</a> authorization of web request <a href="Uniform_Resource_Locator" class="mw-redirect" title="Uniform Resource Locator">URLs</a> using a choice of <a href="Apache_Ant" title="Apache Ant">Apache Ant</a> paths or <a href="Regular_expressions" class="mw-redirect" title="Regular expressions">regular expressions</a>.</li></ul>

<div class="mw-heading mw-heading2"><h2 id="Instance-based_security_features">Instance-based security features</h2></div>

<ul><li>Used for specifying <a href="Access_control_list" class="mw-redirect" title="Access control list">access control lists</a> applicable to <a href="Domain_object" class="mw-redirect" title="Domain object">domain objects</a>.</li>

<li>Spring Security offers a repository for storing, retrieving, and modifying ACLs in a <a href="Database" title="Database">database</a>.<sup id="cite_ref-FOOTNOTEDeinumRubioLongMak2014_3-2" class="reference"><a href="#cite_note-FOOTNOTEDeinumRubioLongMak2014-3"><span class="cite-bracket">[</span>3<span class="cite-bracket">]</span></a></sup><sup class="reference nowrap"><span title="Pages: 376–381, §7-7">: 376–381, §7-7 </span></sup></li>

<li><a href="Authorization" title="Authorization">Authorization</a> features are provided to enforce policies before and after method invocations.</li></ul>

<div class="mw-heading mw-heading2"><h2 id="Other_features">Other features</h2></div>

<ul><li><a href="Software_localization" class="mw-redirect" title="Software localization">Software localization</a> so <a href="User_interface" title="User interface">user interface</a> messages can be in any language.</li>

<li>Channel security, to automatically switch between <a href="HTTP" title="HTTP">HTTP</a> and <a href="HTTPS" title="HTTPS">HTTPS</a> upon meeting particular rules.</li>

<li><a href="Cache_(computing)" title="Cache (computing)">Caching</a> in all database-touching areas of the framework.</li>

<li>Publishing of messages to facilitate <a href="Event-driven_programming" title="Event-driven programming">event-driven programming</a>.</li>

<li>Support for performing <a href="Integration_testing" title="Integration testing">integration testing</a> via <a href="JUnit" title="JUnit">JUnit</a>.</li>

<li>Spring Security itself has comprehensive <a href="JUnit" title="JUnit">JUnit</a> isolation tests.</li>

<li>Several sample applications, detailed <a href="Javadoc" title="Javadoc">JavaDocs</a> and a reference guide.</li>

<li>Web framework independence.</li></ul>

<div class="mw-heading mw-heading2"><h2 id="Releases">Releases</h2></div>

<ul><li>2.0.0 (April 2008)</li>

<li>3.0.0 (December 2009)</li>

<li>3.1.0 (December 7, 2011)</li>

<li>3.1.2 (August 10, 2012)</li>

<li>3.2.0 (December 16, 2013)</li>

<li>4.0.0 (March 26, 2015)</li>

<li>4.1.3 (August 24, 2016)</li>

<li>4.2.0 (November 10, 2016)</li>

<li>3.2.10, 4.1.4, 4.2.1 (December 22, 2016)</li>

<li>4.2.2 (March 2, 2017)</li>

<li>5.0.0 (November 28, 2017)</li>

<li>5.0.8, 4.2.8 (September 11, 2018)<sup id="cite_ref-5" class="reference"><a href="#cite_note-5"><span class="cite-bracket">[</span>5<span class="cite-bracket">]</span></a></sup></li>

<li>5.1.0 GA (September 27, 2018)<sup id="cite_ref-6" class="reference"><a href="#cite_note-6"><span class="cite-bracket">[</span>6<span class="cite-bracket">]</span></a></sup></li>

<li>5.1.1, 5.0.9, 4.2.9 (October 16, 2018)<sup id="cite_ref-7" class="reference"><a href="#cite_note-7"><span class="cite-bracket">[</span>7<span class="cite-bracket">]</span></a></sup></li>

<li>5.1.2, 5.0.10, 4.2.10 (November 29, 2018)<sup id="cite_ref-8" class="reference"><a href="#cite_note-8"><span class="cite-bracket">[</span>8<span class="cite-bracket">]</span></a></sup></li>

<li>5.1.3, 5.0.11, 4.2.11 (January 11, 2019)<sup id="cite_ref-9" class="reference"><a href="#cite_note-9"><span class="cite-bracket">[</span>9<span class="cite-bracket">]</span></a></sup></li>

<li>5.1.4 (February 14, 2019)<sup id="cite_ref-10" class="reference"><a href="#cite_note-10"><span class="cite-bracket">[</span>10<span class="cite-bracket">]</span></a></sup></li>

<li>5.1.5, 5.0.12, 4.2.12 (April 3, 2019)<sup id="cite_ref-11" class="reference"><a href="#cite_note-11"><span class="cite-bracket">[</span>11<span class="cite-bracket">]</span></a></sup></li></ul>

<div class="mw-heading mw-heading2"><h2 id="Citations">Citations</h2></div>

/* start https://en.wikipedia.org/ */

.mw-parser-output .reflist{margin-bottom:0.5em;list-style-type:decimal}@media screen{.mw-parser-output .reflist{font-size:90%}}.mw-parser-output .reflist .references{font-size:100%;margin-bottom:0;list-style-type:inherit}.mw-parser-output .reflist-columns-2{column-width:30em}.mw-parser-output .reflist-columns-3{column-width:25em}.mw-parser-output .reflist-columns{margin-top:0.3em}.mw-parser-output .reflist-columns ol{margin-top:0}.mw-parser-output .reflist-columns li{page-break-inside:avoid;break-inside:avoid-column}.mw-parser-output .reflist-upper-alpha{list-style-type:upper-alpha}.mw-parser-output .reflist-upper-roman{list-style-type:upper-roman}.mw-parser-output .reflist-lower-alpha{list-style-type:lower-alpha}.mw-parser-output .reflist-lower-greek{list-style-type:lower-greek}.mw-parser-output .reflist-lower-roman{list-style-type:lower-roman}

/* end https://en.wikipedia.org/ */

</style><div class="reflist">

/* start https://en.wikipedia.org/ */

.mw-parser-output cite.citation{font-style:inherit;word-wrap:break-word}.mw-parser-output .citation q{quotes:"\"""\"""'""'"}.mw-parser-output .citation:target{background-color:rgba(0,127,255,0.133)}.mw-parser-output .id-lock-free.id-lock-free a{background:url("./mw/Lock-green.svg")right 0.1em center/9px no-repeat}.mw-parser-output .id-lock-limited.id-lock-limited a,.mw-parser-output .id-lock-registration.id-lock-registration a{background:url("./mw/Lock-gray-alt-2.svg")right 0.1em center/9px no-repeat}.mw-parser-output .id-lock-subscription.id-lock-subscription a{background:url("./mw/Lock-red-alt-2.svg")right 0.1em center/9px no-repeat}.mw-parser-output .cs1-ws-icon a{background:url("./mw/Wikisource-logo.svg")right 0.1em center/12px no-repeat}body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .id-lock-free a,body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .id-lock-limited a,body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .id-lock-registration a,body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .id-lock-subscription a,body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .cs1-ws-icon a{background-size:contain;padding:0 1em 0 0}.mw-parser-output .cs1-code{color:inherit;background:inherit;border:none;padding:inherit}.mw-parser-output .cs1-hidden-error{display:none;color:var(--color-error,#d33)}.mw-parser-output .cs1-visible-error{color:var(--color-error,#d33)}.mw-parser-output .cs1-maint{display:none;color:#085;margin-left:0.3em}.mw-parser-output .cs1-kern-left{padding-left:0.2em}.mw-parser-output .cs1-kern-right{padding-right:0.2em}.mw-parser-output .citation .mw-selflink{font-weight:inherit}@media screen{.mw-parser-output .cs1-format{font-size:95%}html.skin-theme-clientpref-night .mw-parser-output .cs1-maint{color:#18911f}}@media screen and (prefers-color-scheme:dark){html.skin-theme-clientpref-os .mw-parser-output .cs1-maint{color:#18911f}}

/* end https://en.wikipedia.org/ */

</style><cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://github.com/spring-projects/spring-security/tree/6.5.1">"Spring Security 6.5.1"</a>. <i>GitHub</i><span class="reference-accessdate">. Retrieved <span class="nowrap">June 24,</span> 2025</span>.</cite></span>

</li>

<li id="cite_note-2"><span class="mw-cite-backlink"><b><a href="#cite_ref-2">^</a></b></span> <span class="reference-text"><cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://spring.io/blog/2007/01/25/why-the-name-acegi">"Why the name Acegi?"</a>. <i>spring.io</i>.</cite></span>

</li>

<li id="cite_note-FOOTNOTEDeinumRubioLongMak2014-3"><span class="mw-cite-backlink">^ <a href="#cite_ref-FOOTNOTEDeinumRubioLongMak2014_3-0"><sup><i><b>a</b></i></sup></a> <a href="#cite_ref-FOOTNOTEDeinumRubioLongMak2014_3-1"><sup><i><b>b</b></i></sup></a> <a href="#cite_ref-FOOTNOTEDeinumRubioLongMak2014_3-2"><sup><i><b>c</b></i></sup></a></span> <span class="reference-text"><a href="#CITEREFDeinumRubioLongMak2014">Deinum et al. 2014</a>.</span>

</li>

<li id="cite_note-4"><span class="mw-cite-backlink"><b><a href="#cite_ref-4">^</a></b></span> <span class="reference-text"><cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://authorization.news/master-oauth-how-to-build-a-secure-authorization-serverpart-ii/">"Master OAuth: How To Build a Secure Authorization Server"</a>. December 29, 2024.</cite></span>

</li>

<li id="cite_note-5"><span class="mw-cite-backlink"><b><a href="#cite_ref-5">^</a></b></span> <span class="reference-text"><cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://spring.io/blog/2018/09/11/spring-security-5-0-8-and-4-2-8-released">"Spring Security 5.0.8 and 4.2.8 Released"</a>. <i>spring.io</i><span class="reference-accessdate">. Retrieved <span class="nowrap">2019-06-09</span></span>.</cite></span>

</li>

<li id="cite_note-6"><span class="mw-cite-backlink"><b><a href="#cite_ref-6">^</a></b></span> <span class="reference-text"><cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://spring.io/blog/2018/09/27/spring-security-5-1-goes-ga">"Spring Security 5.1 goes GA"</a>. <i>spring.io</i><span class="reference-accessdate">. Retrieved <span class="nowrap">2019-06-09</span></span>.</cite></span>

</li>

<li id="cite_note-7"><span class="mw-cite-backlink"><b><a href="#cite_ref-7">^</a></b></span> <span class="reference-text"><cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://spring.io/blog/2018/10/16/spring-security-5-1-1-5-0-9-and-4-2-9-released">"Spring Security 5.1.1, 5.0.9, and 4.2.9 Released"</a>. <i>spring.io</i><span class="reference-accessdate">. Retrieved <span class="nowrap">2019-06-09</span></span>.</cite></span>

</li>

<li id="cite_note-8"><span class="mw-cite-backlink"><b><a href="#cite_ref-8">^</a></b></span> <span class="reference-text"><cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://spring.io/blog/2018/11/29/spring-security-5-1-2-5-0-10-4-2-10-released">"Spring Security 5.1.2, 5.0.10, 4.2.10 Released"</a>. <i>spring.io</i><span class="reference-accessdate">. Retrieved <span class="nowrap">2019-06-09</span></span>.</cite></span>

</li>

<li id="cite_note-9"><span class="mw-cite-backlink"><b><a href="#cite_ref-9">^</a></b></span> <span class="reference-text"><cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://spring.io/blog/2019/01/11/spring-security-5-1-3-5-0-11-4-2-11-released">"Spring Security 5.1.3, 5.0.11, 4.2.11 Released"</a>. <i>spring.io</i><span class="reference-accessdate">. Retrieved <span class="nowrap">2019-06-09</span></span>.</cite></span>

</li>

<li id="cite_note-10"><span class="mw-cite-backlink"><b><a href="#cite_ref-10">^</a></b></span> <span class="reference-text"><cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://spring.io/blog/2019/02/14/spring-security-5-1-4-released">"Spring Security 5.1.4 Released"</a>. <i>spring.io</i><span class="reference-accessdate">. Retrieved <span class="nowrap">2019-06-09</span></span>.</cite></span>

</li>

<li id="cite_note-11"><span class="mw-cite-backlink"><b><a href="#cite_ref-11">^</a></b></span> <span class="reference-text"><cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://spring.io/blog/2019/04/03/spring-security-5-1-5-5-0-12-4-2-12-released">"Spring Security 5.1.5, 5.0.12, 4.2.12 Released"</a>. <i>spring.io</i><span class="reference-accessdate">. Retrieved <span class="nowrap">2019-06-09</span></span>.</cite></span>

</li>

</ol></div></div>

<div class="mw-heading mw-heading2"><h2 id="References">References</h2></div>

<ul><li><cite id="CITEREFDeinumRubioLongMak2014" class="citation book cs1">Deinum, Marten; Rubio, Daniel; Long, Josh; Mak, Gary (September 1, 2014). <i>Spring Recipes: A Problem-Solution Approach</i> (Second ed.). <a href="Apress" class="mw-redirect" title="Apress">Apress</a>. p. 1104. <a href="ISBN_(identifier)" class="mw-redirect" title="ISBN (identifier)">ISBN</a> <bdi>978-1-4302-2499-0</bdi>.</cite></li>

<li><cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://spring.io/blog/2007/01/25/why-the-name-acegi">"Why the name Acegi?"</a>. <i>spring.io</i>.</cite></li></ul>

<div class="mw-heading mw-heading2"><h2 id="External_links">External links</h2></div>

<ul><li><span class="official-website"><span class="url"><a rel="nofollow" class="external text" href="http://projects.spring.io/spring-security/">Official website</a></span></span></li></ul>

/* start https://en.wikipedia.org/ */

.mw-parser-output .portal-bar{font-size:88%;font-weight:bold;display:flex;justify-content:center;align-items:baseline}.mw-parser-output .portal-bar-bordered{padding:0 2em;background-color:#fdfdfd;border:1px solid #a2a9b1;clear:both;margin:1em auto 0}.mw-parser-output .portal-bar-related{font-size:100%;justify-content:flex-start}.mw-parser-output .portal-bar-unbordered{padding:0 1.7em;margin-left:0}.mw-parser-output .portal-bar-header{margin:0 1em 0 0.5em;flex:0 0 auto;min-height:24px}.mw-parser-output .portal-bar-content{display:flex;flex-flow:row wrap;flex:0 1 auto;padding:0.15em 0;column-gap:1em;align-items:baseline;margin:0;list-style:none}.mw-parser-output .portal-bar-content-related{margin:0;list-style:none}.mw-parser-output .portal-bar-item{display:inline-block;margin:0.15em 0.2em;min-height:24px;line-height:24px}@media screen and (max-width:768px){.mw-parser-output .portal-bar{font-size:88%;font-weight:bold;display:flex;flex-flow:column wrap;align-items:baseline}.mw-parser-output .portal-bar-header{text-align:center;flex:0;padding-left:0.5em;margin:0 auto}.mw-parser-output .portal-bar-related{font-size:100%;align-items:flex-start}.mw-parser-output .portal-bar-content{display:flex;flex-flow:row wrap;align-items:center;flex:0;column-gap:1em;border-top:1px solid #a2a9b1;margin:0 auto;list-style:none}.mw-parser-output .portal-bar-content-related{border-top:none;margin:0;list-style:none}}.mw-parser-output .navbox+link+.portal-bar,.mw-parser-output .navbox+style+.portal-bar,.mw-parser-output .navbox+link+.portal-bar-bordered,.mw-parser-output .navbox+style+.portal-bar-bordered,.mw-parser-output .sister-bar+link+.portal-bar,.mw-parser-output .sister-bar+style+.portal-bar,.mw-parser-output .portal-bar+.navbox-styles+.navbox,.mw-parser-output .portal-bar+.navbox-styles+.sister-bar{margin-top:-1px}

/* end https://en.wikipedia.org/ */

</style></div><div><div class="zim-footer">

This article is issued from <a class="external text" title="Last edited on 2025-07-08" href="https://en.wikipedia.org/wiki/?title=Spring_Security&oldid=1299386941">Wikipedia</a>. The text is available under <a class="external text" href="https://creativecommons.org/licenses/by-sa/4.0/deed.en">Creative Commons Attribution-Share Alike 4.0</a> unless otherwise noted. Additional terms may apply for the media files.

</div>

</div></div>

</div>

</main>

</div>

</body></html>