Winter Security: Planned Application Security Module

Winter Security is a placeholder module in the suvera/winter-modules monorepo. This page documents its current state so you know what to expect when the module ships.

Caution

This module is not yet released. The winter-security directory in the monorepo contains no PHP source, only a keepme.txt placeholder. The README in that directory references a module class path (dev\winterframework\data\redis\SecurityModule) that does not exist in the codebase. Do not enable this module in application.yml; it will fail to load.

Current state

• Package: bundled inside suvera/winter-modules
• Autoload namespace reserved: dev\winterframework\security\ (per the monorepo composer.json)
• Source directory: winter-security/src/ (empty, contains only keepme.txt)
• No WinterModule implementation exists yet

When it ships

Watch the winter-security directory on GitHub for updates. Once a real SecurityModule class lands, this page will be replaced with configuration, autowired beans, and usage examples.

In the meantime

If you need to secure a Winter Boot application today, handle it in your own code:

• Protect routes with a custom interceptor that authenticates requests before they reach the controller.
• Enforce authorisation inside services with a custom AOP stereotype attached to controller or service methods.
• Manage session or API-key state with the Local Stores KV backend or an external store connected via the Redis module.