I implement complete authentication and authorization systems for Spring Boot applications using Spring Security.
What's included:
- JWT-based stateless authentication (access + refresh tokens)
- OAuth2 Social Login (Google, GitHub)
- Two-Factor Authentication (2FA) via TOTP
- Role-Based Access Control (RBAC) — multiple user roles with permission layers
- Secure password reset flow
- Spring Security filter chain configuration from scratch
Built this exact stack for SafeNote (full-stack secure notes app) and MakeSenseEdu — both live in production.