comparar · Authentication
Both work with Spring. In a kit you pick one, and your agent gets the rule to use only that one.
| OAuth2 resource server | Spring Security | |
|---|---|---|
| What it is | OAuth2 resource server for Spring Boot. | Authentication and authorization for your API. |
| Frameworks | Spring | Spring |
| Paquetes | — | — |
| Skill oficial | — | github/awesome-copilot@spring-security, affaan-m/ecc@springboot-security |
| How your agent uses it | Configure an explicitly trusted issuer/JWK set and authorization rules. Do not disable CSRF or allow all endpoints as a shortcut. | Define the rules in a `@Configuration` class with a `SecurityFilterChain`. Everything requires authentication by default: explicitly open only the public routes. |
| Kits that offer it | api-spring-boot | api-spring-boot |
| Chosen in | 0 installs | 0 installs |