CodeHub MCPcopy Index your code

hub / github.com/spring-projects/spring-security

github.com/spring-projects/spring-security @7.1.0

repository ↗ · DeepWiki ↗ · release 7.1.0 ↗ · Ask this repo → · + Follow

40,745 symbols 237,575 edges 4,415 files 9,453 documented · 23% ● updated 2d ago7.1.0 · 2026-06-09★ 9,5501,254 open issues

Extension points exported contracts — how you extend this code

PasswordEncoder (Interface)

Service interface for encoding passwords. The preferred implementation is BCryptPasswordEncoder. @author Keith [7 implementers]

crypto/src/main/java/org/springframework/security/crypto/password/PasswordEncoder.java

PublicKeyCredentialCreationOptionsRepository (Interface)

Saves PublicKeyCredentialCreationOptions between a request to generate an assertion and the validation of the as [6 implementers]

webauthn/src/main/java/org/springframework/security/web/webauthn/registration/PublicKeyCredentialCreationOptionsRepository.java

ReactiveOpaqueTokenAuthenticationConverter (Interface)

Convert a successful introspection result into an authentication result. @author Jerome Wacongne <ch4mp@c4-soft.com& [121 …

oauth2/oauth2-resource-server/src/main/java/org/springframework/security/oauth2/server/resource/introspection/ReactiveOpaqueTokenAuthenticationConverter.java

JwaAlgorithm (Interface)

Super interface for cryptographic algorithms defined by the JSON Web Algorithms (JWA) specification and used by JSON Web [32 …

oauth2/oauth2-jose/src/main/java/org/springframework/security/oauth2/jose/JwaAlgorithm.java

OAuth2AuthorizationConsentService (Interface)

Implementations of this interface are responsible for the management of {@link OAuth2AuthorizationConsent OAuth 2.0 Auth [9 …

oauth2/oauth2-authorization-server/src/main/java/org/springframework/security/oauth2/server/authorization/OAuth2AuthorizationConsentService.java

OAuth2TokenValidator (Interface)

Implementations of this interface are responsible for "verifying" the validity and/or constraints of the attri [31 …

oauth2/oauth2-core/src/main/java/org/springframework/security/oauth2/core/OAuth2TokenValidator.java

ReactiveOAuth2AuthorizedClientService (Interface)

Implementations of this interface are responsible for the management of {@link OAuth2AuthorizedClient Authorized Client( [16 …

oauth2/oauth2-client/src/main/java/org/springframework/security/oauth2/client/ReactiveOAuth2AuthorizedClientService.java

UserDetailsManager (Interface)

An extension of the UserDetailsService which provides the ability to create new users and update existing ones. [6 implementers]

core/src/main/java/org/springframework/security/provisioning/UserDetailsManager.java

Core symbols most depended-on inside this repo

config/src/main/java/org/springframework/security/config/annotation/SecurityBuilder.java

core/src/main/java/org/springframework/security/authorization/AuthorizationManager.java

core/src/test/java/org/springframework/security/core/annotation/UniqueSecurityAnnotationScannerTests.java

core/src/test/java/org/springframework/security/core/annotation/UniqueSecurityAnnotationScannerTests.java

oauth2/oauth2-jose/src/main/java/org/springframework/security/oauth2/jwt/JwtValidators.java

oauth2/oauth2-authorization-server/src/main/java/org/springframework/security/oauth2/server/authorization/token/OAuth2TokenContext.java

web/src/main/java/org/springframework/security/web/csrf/DeferredCsrfToken.java

core/src/main/java/org/springframework/security/core/ComparableVersion.java

Shape

Method 33,805

Class 6,389

Interface 495

Enum 40

Function 16

Languages

Java100%

TypeScript1%

Modules by API surface

config/src/main/java/org/springframework/security/config/web/server/ServerHttpSecurity.java390 symbols

config/src/test/java/org/springframework/security/config/annotation/web/configurers/oauth2/server/resource/OAuth2ResourceServerConfigurerTests.java257 symbols

config/src/test/java/org/springframework/security/config/annotation/method/configuration/PrePostMethodSecurityConfigurationTests.java257 symbols

config/src/test/java/org/springframework/security/config/annotation/web/configurers/AuthorizeHttpRequestsConfigurerTests.java186 symbols

test/src/main/java/org/springframework/security/test/web/servlet/request/SecurityMockMvcRequestPostProcessors.java143 symbols

core/src/test/java/org/springframework/security/core/annotation/UniqueSecurityAnnotationScannerTests.java142 symbols

web/src/test/java/org/springframework/security/web/util/OnCommittedResponseWrapperTests.java134 symbols

config/src/test/java/org/springframework/security/config/annotation/web/configurers/HeadersConfigurerTests.java131 symbols

config/src/test/java/org/springframework/security/config/annotation/web/configurers/oauth2/client/OAuth2LoginConfigurerTests.java127 symbols

test/src/main/java/org/springframework/security/test/web/reactive/server/SecurityMockServerConfigurers.java126 symbols

web/src/test/java/org/springframework/security/web/firewall/StrictHttpFirewallTests.java113 symbols

config/src/test/java/org/springframework/security/config/annotation/web/configuration/HttpSecurityConfigurationTests.java111 symbols

Dependencies from manifests, versioned

@antora/atlas-extension1.0.0-alpha.5 · 1×

@antora/collector-extension1.0.3 · 1×

@asciidoctor/tabs1.0.0-beta.6 · 1×

@eslint/js9.6.0 · 1×

@springio/antora-extensions1.14.12 · 1×

@springio/asciidoctor-extensions1.0.0-alpha.18 · 1×

@types/sinon17.0.3 · 1×

antora3.2.0-alpha.12 · 1×

chai4.3 · 1×

esbuild0.25.0 · 1×

eslint9.6.0 · 1×

eslint-config-prettier9.1.0 · 1×

Datastores touched

acltestDatabase · 1 repos

For agents

$ claude mcp add spring-security \
  -- python -m otcore.mcp_server <graph>

⬇ download graph artifact