Packages 
Package Description
org.springframework.security.web
Spring Security's web security module.
org.springframework.security.web.access
Access-control related classes and packages.
org.springframework.security.web.access.channel
Classes that ensure web requests are received over required transport channels.
org.springframework.security.web.access.expression
Implementation of web security expressions.
org.springframework.security.web.access.intercept
Enforcement of security for HTTP requests, typically by the URL requested.
org.springframework.security.web.authentication
Authentication processing mechanisms, which respond to the submission of authentication credentials using various protocols (eg BASIC, CAS, form login etc).
org.springframework.security.web.authentication.logout
Logout functionality based around a filter which handles a specific logout URL.
org.springframework.security.web.authentication.preauth
Support for "pre-authenticated" scenarios, where Spring Security assumes the incoming request has already been authenticated by some externally configured system.
org.springframework.security.web.authentication.preauth.j2ee
Pre-authentication support for container-authenticated requests.
org.springframework.security.web.authentication.preauth.websphere
Websphere-specific pre-authentication classes.
org.springframework.security.web.authentication.preauth.x509
X.509 client certificate authentication support.
org.springframework.security.web.authentication.rememberme
Support for remembering a user between different web sessions.
org.springframework.security.web.authentication.session
Strategy interface and implementations for handling session-related behaviour for a newly authenticated user.
org.springframework.security.web.authentication.switchuser
Provides HTTP-based "switch user" (su) capabilities.
org.springframework.security.web.authentication.ui
Authentication user-interface rendering code.
org.springframework.security.web.authentication.www
WWW-Authenticate based authentication mechanism implementations: Basic and Digest authentication.
org.springframework.security.web.bind.annotation  
org.springframework.security.web.bind.support  
org.springframework.security.web.context
Classes which are responsible for maintaining the security context between HTTP requests.
org.springframework.security.web.context.request.async  
org.springframework.security.web.context.support  
org.springframework.security.web.csrf  
org.springframework.security.web.debug  
org.springframework.security.web.firewall  
org.springframework.security.web.header  
org.springframework.security.web.header.writers  
org.springframework.security.web.header.writers.frameoptions  
org.springframework.security.web.http  
org.springframework.security.web.jaasapi
Makes a JAAS Subject available as the current Subject.
org.springframework.security.web.jackson2
Mix-in classes to provide Jackson serialization support.
org.springframework.security.web.method.annotation  
org.springframework.security.web.reactive.result.method.annotation  
org.springframework.security.web.reactive.result.view  
org.springframework.security.web.savedrequest
Classes related to the caching of an HttpServletRequest which requires authentication.
org.springframework.security.web.server  
org.springframework.security.web.server.authentication  
org.springframework.security.web.server.authentication.logout  
org.springframework.security.web.server.authorization  
org.springframework.security.web.server.context  
org.springframework.security.web.server.csrf  
org.springframework.security.web.server.header  
org.springframework.security.web.server.jackson2  
org.springframework.security.web.server.savedrequest  
org.springframework.security.web.server.transport  
org.springframework.security.web.server.ui  
org.springframework.security.web.server.util.matcher  
org.springframework.security.web.servlet.support.csrf  
org.springframework.security.web.servlet.util.matcher  
org.springframework.security.web.servletapi
Populates a Servlet request with a new Spring Security compliant HttpServletRequestWrapper.
org.springframework.security.web.session
Session management filters, HttpSession events and publisher classes.
org.springframework.security.web.util
Web utility classes.
org.springframework.security.web.util.matcher