Spring Security auto-configuration in Spring Boot - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is Spring Security auto-configuration?

It is a feature in Spring Boot that automatically sets up basic security settings for your application without needing manual configuration.

beginner

Which dependency triggers Spring Security auto-configuration in a Spring Boot project?

Adding the spring-boot-starter-security dependency triggers the auto-configuration of Spring Security.

intermediate

What default behavior does Spring Security auto-configuration provide?

It secures all HTTP endpoints by requiring authentication and provides a default login form and a generated password in the console.

intermediate

How can you customize Spring Security auto-configuration?

You can create your own <code>@Configuration</code> class with <code>@EnableWebSecurity</code> and define beans like <code>SecurityFilterChain</code> to override defaults.

intermediate

What happens if you exclude Spring Security auto-configuration?

Your application will not have any security settings applied automatically, so endpoints will be open unless you configure security manually.

What triggers Spring Security auto-configuration in a Spring Boot app?

A Adding spring-boot-starter-data-jpa dependency

B Adding spring-boot-starter-web dependency

C Adding spring-boot-starter-security dependency

D Adding spring-boot-starter-thymeleaf dependency

The spring-boot-starter-security dependency activates Spring Security auto-configuration.

What is the default behavior of Spring Security auto-configuration?

A All HTTP endpoints require authentication with a default login form

B Only POST requests require authentication

C All HTTP endpoints are open without authentication

D It disables security by default

By default, Spring Security auto-configuration secures all endpoints and provides a login form.

How can you disable Spring Security auto-configuration?

A Add @EnableAutoConfiguration annotation

B Remove spring-boot-starter-security dependency

C Add @SpringBootApplication annotation

D Add spring-boot-starter-web dependency

Removing the security starter dependency disables auto-configuration for security.

Which class can you define to customize Spring Security auto-configuration?

A DataSourceConfig

B ApplicationRunner

C RestController

D SecurityFilterChain

Defining a SecurityFilterChain bean allows you to customize security settings.

What does Spring Security auto-configuration print in the console on startup?

A A generated default user password

B Database connection details

C Application version info

D No output related to security

It prints a generated password for the default user to help you log in initially.

Explain how Spring Security auto-configuration works in a Spring Boot application.

Think about what happens when you add the security starter to your project.

Describe ways to customize or override Spring Security auto-configuration.

Consider how you can add your own security rules in Spring Boot.