JWT Spring Boot Starter v1.0.2

jwt-spring-boot-starter v1.0.2

Major Update — Spring Security + JWT Authentication Integration

Version 1.0.2 introduces full Spring Security integration and automatic JWT authentication support.

This release transforms the project from a simple JWT utility starter into a production-ready JWT authentication framework for Spring Boot applications.

---

New Features

JWT Authentication Filter

Added automatic JWT request filtering using:

JwtAuthenticationFilter

The filter now:

• intercepts incoming requests
• extracts Bearer tokens
• validates JWTs
• authenticates requests automatically
• populates Spring SecurityContext

---

Spring Security Integration

Integrated:

spring-boot-starter-security

The starter now automatically configures:

• SecurityFilterChain
• JWT authentication filter
• protected routes
• authentication lifecycle

with zero manual setup.

---

Public Route Support

Public endpoints are now supported using:

.requestMatchers("/auth/**").permitAll()

allowing:

• token generation endpoints
• login endpoints
• public APIs

to remain accessible without authentication.

---

Protected Route Authentication

All non-public routes are automatically secured.

Authenticated requests now work seamlessly with:

Authorization: Bearer YOUR_TOKEN

---

SecurityContext Integration

Authenticated users are now available directly inside controllers:

Authentication authentication

Example:

@GetMapping("/user")
public String user(Authentication authentication) {

    return authentication.getName();
}

---

Auto-Configured Components

Version 1.0.2 now auto-registers:

• JwtService
• JwtAuthenticationFilter
• SecurityFilterChain
• JwtConfigurationProperties

---

Extensibility Improvements

The starter now supports overriding:

• JwtService
• JwtAuthenticationFilter
• SecurityFilterChain

using Spring Boot's:

@ConditionalOnMissingBean

allowing applications to customize behavior without modifying the starter.

---

Internal Improvements

• Improved starter architecture
• Added modular security layer
• Cleaner authentication flow
• Better Spring Boot auto-configuration integration
• Enhanced starter extensibility

---

Example Usage

jwt:
  secret-key: mysecretkey
  access-token-expiration: 600000
  refresh-token-expiration: 604800000

Then simply inject:

private final JwtService jwtService;

JWT security becomes automatically active.

---

Version

<version>1.0.2</version>

---

Upcoming Features

• Dynamic excluded routes
• Role-based authorization
• Authorities extraction
• Redis token blacklist
• Swagger/OpenAPI integration
• RSA support
• Refresh token workflow
• OAuth2 compatibility

---

Repository

https://github.com/smitroy4/jwt-spring-boot-starter

---

Author

Smit Roy

JWT Spring Boot Starter v1.0.0

Initial release of JWT Spring Boot Starter.

Features:

• JWT Access Token Generation
• Refresh Token Support
• Claims Extraction
• Auto Configuration
• Spring Boot 3 Support
• Java 21 Support
• GitHub Packages Deployment