spring-projects / spring-projects/spring-security

Consider enabling decentralized per-module security configuration

Open
#13,295 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

theme: partner-use-cases type: enhancement
Dominant language
Java
Stars
9.6k
Forks
6.3k
Avg merge
2d 11h
Merged PRs (30d)
52

Description

When building a large application with many modules I want to be able to define spring security configuration in each module so that the application security configuration gets assembled out of the configuration in each module. I want to able to create re-usable modules drop them into different application and have their security configuration added to the app's security configuration.

Spring security configuration is centralized and module specific security configuration has to be defined outside in the global location where spring security is configured at the level of the app. This centralized configuration makes testing modules in isolation harder since the security configuration is located outside the module. Enhancing spring security to enable decentralized module specific security configuration, where the app can combine the security settings from all the modules is very helpful.

Related gh-13266

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

No files, tests, or entry points are named; begin by reviewing the related issue gh-13266 and locating Spring Security's existing application-level configuration model. The work is complete when reusable modules can contribute security configuration that the application assembles while still allowing modules to be tested in isolation.

Written by the indexing model from the issue text.

Assessment

Tech stack
java, spring
Domain
backend, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.