spring-projects / spring-projects/spring-security
Consider enabling decentralized per-module security configuration
Nobody has claimed this yet.
- Dominant language
- Java
- Stars
- 9.6k
- Forks
- 6.3k
- Avg merge
- 2d 11h
- Merged PRs (30d)
- 52
Description
When building a large application with many modules I want to be able to define spring security configuration in each module so that the application security configuration gets assembled out of the configuration in each module. I want to able to create re-usable modules drop them into different application and have their security configuration added to the app's security configuration.
Spring security configuration is centralized and module specific security configuration has to be defined outside in the global location where spring security is configured at the level of the app. This centralized configuration makes testing modules in isolation harder since the security configuration is located outside the module. Enhancing spring security to enable decentralized module specific security configuration, where the app can combine the security settings from all the modules is very helpful.
Related gh-13266
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
No files, tests, or entry points are named; begin by reviewing the related issue gh-13266 and locating Spring Security's existing application-level configuration model. The work is complete when reusable modules can contribute security configuration that the application assembles while still allowing modules to be tested in isolation.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java, spring
- Domain
- backend, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100