Spring Security: The Everyday and the Non-Obvious

When it comes to customizing everything related to the "security" of our projects, we use some "off-the-shelf" solutions and simply replicate them, fine-tuning them to fit our needs, but Spring Security is something more important than just "a thing we'll bolt on here".  Let's talk about what pitfalls it promises.