Spring Security 7

A walkthrough of Spring Security 7.0 covering authentication and authorization features. Topics include JDBC-based user management, password encoding migration (SHA-256 to bcrypt to Argon2 via Password4j), one-time token (magic link) authentication, WebAuthn/passkeys support, multi-factor authentication with the new @EnableMultiFactorAuthentication annotation, and setting up an OAuth2 authorization server with a resource server and client. The tutorial also demonstrates the new additive security customizers that avoid overriding Spring Boot defaults, and declarative HTTP clients with automatic OAuth2 token injection.