As the name suggests, Spring Security represents the framework with various security-related power features. It offers a highly customizable authentication and access control framework. In modern development, Spring Security is a de facto standard for securing Spring Framework-based applications.
Spring Security provides not just authentication but authorization features to the application. Spring Security comes with the following features:
- Authentication and authorization
- Basic, digest, and form-based authentication
- LDAP authentication
- OpenID authentication
- Single Sign-On implementation
- Cross-Site Request Forgery (CSRF) implementation
- Remember-Me through HTTP cookies
- ACLs implementation
- Channel Security, automatically switching between HTTP and HTTPS
- I18N internationalization
- JAAS, Java Authentication, and Authorization Service
- Flow Authorization...
