Agent skill

Spring Cloud Gateway

by rrezartprebreza in rrezartprebreza/spring-boot-skills

A skill your agent uses when building Spring Cloud Gateway 5 on Spring Boot 4, including WebFlux or Web MVC routes, edge authentication, trusted headers, rate limits, timeouts, and resilience.

MITAuto-check passedBackend & APIs

Install Spring Cloud Gateway

skills CLI
$ npx skills add rrezartprebreza/spring-boot-skills --skill spring-cloud-gateway -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install rrezartprebreza/spring-boot-skills spring-cloud-gateway --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/rrezartprebreza/spring-boot-skills.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/spring-boot-4/spring-cloud-gateway .claude/skills/spring-cloud-gateway && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
spring-cloud-gateway
GitHub stars
301
Token cost
~1.1k tokens
SKILL.md length
388 words
Files
5
Skills in repo
51
Repo updated
First seen
Licence
MIT

At a glance

A skill your agent uses when building Spring Cloud Gateway 5 on Spring Boot 4, including WebFlux or Web MVC routes, edge authentication, trusted headers, rate limits, timeouts, and resilience.

  • Building Spring Cloud Gateway 5 on Spring Boot 4
  • SKILL.md covers Compatibility and dependencies, Gateway 5 configuration…, Route and security rules and Testing and operations, plus 3 more sections
  • Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md
  • Including WebFlux

What it does

Spring Cloud Gateway is an agent skill from rrezartprebreza/spring-boot-skills. Use when building Spring Cloud Gateway 5 on Spring Boot 4, including WebFlux or Web MVC routes, edge authentication, trusted headers, rate limits, timeouts, and resilience. Do not use for ordinary outbound HTTP clients or domain orchestration.

Its SKILL.md is about 1.1k tokens, which your agent loads only when the skill is triggered. The skill folder holds 6 other files (for example `agents/openai.yaml`, `examples/bad-routes.yml` and `examples/good-routes.yml`).

It sits in Backend & APIs, covering Backend development and Rate limiting. It works with Spring Boot. The repository describes itself as: Production-grade Claude Code and Codex skills for Spring Boot developers. The licence is MIT.

When your agent uses it

  • Building Spring Cloud Gateway 5 on Spring Boot 4
  • Including WebFlux
  • Edge authentication
  • Trusted headers

Example prompts

  • “/spring-cloud-gateway”

What it can do on your machine

Read from SKILL.md and the folder at commit f0c06a0. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    No scripts in the folder and no shell commands in SKILL.md (its code samples are xml and yaml).

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    Links to these hosts (documentation or services it may open):

    • docs.spring.io
    • spring.io

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Spring Cloud Gateway loads about 1.1k tokens when it runs. Until then it costs about 66 tokens; SKILL.md has 388 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~66
When it runs · the whole SKILL.md, loaded when a task matches
~1.1k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from rrezartprebreza/spring-boot-skills at commit f0c06a0, republished under its MIT licence (© rrezartprebreza). 388 words, ~1,076 tokens.

Download SKILL.mdSave it as .claude/skills/spring-cloud-gateway/SKILL.md (or your agent's skills folder). This skill also uses 4 other files; get the full folder from GitHub.
name
spring-cloud-gateway
description
Use when building Spring Cloud Gateway 5 on Spring Boot 4, including WebFlux or Web MVC routes, edge authentication, trusted headers, rate limits, timeouts, and resilience. Do not use for ordinary outbound HTTP clients or domain orchestration.

Spring Cloud Gateway 5

Keep the gateway an edge adapter. Do not move domain workflows into filters.

Compatibility and dependencies

  • Use the latest Spring Cloud 2025.1.x release train for Spring Boot 4.
  • Boot 4.1 support starts with Spring Cloud 2025.1.2.
  • Import spring-cloud-dependencies as a BOM and omit versions from individual Cloud dependencies.
  • Choose exactly one gateway runtime.
xml
<!-- Reactive Netty gateway -->
<dependency>
    <groupId>org.springframework.cloud</groupId>
    <artifactId>spring-cloud-starter-gateway-server-webflux</artifactId>
</dependency>

<!-- OR servlet gateway: spring-cloud-starter-gateway-server-webmvc -->

Do not use the old spring-cloud-starter-gateway coordinate or force a Boot 3 release train onto Boot 4. WebFlux requires Reactor Netty and cannot run as a traditional servlet WAR; Web MVC uses a servlet runtime and WebMvc.fn.

Gateway 5 configuration namespaces

Gateway 5 separates server implementations in configuration:

  • WebFlux: spring.cloud.gateway.server.webflux.*
  • Web MVC: spring.cloud.gateway.server.webmvc.*
yaml
spring:
  cloud:
    gateway:
      server:
        webflux:
          httpclient:
            connect-timeout: 2000
            response-timeout: 5s
          routes:
            - id: orders-api
              uri: http://orders.internal
              predicates:
                - Path=/api/orders/**
              filters:
                - RemoveRequestHeader=X-User-Id

The Boot 3-era spring.cloud.gateway.routes and spring.cloud.gateway.httpclient paths do not bind to Gateway 5's WebFlux server properties.

Route and security rules

  • Use stable route IDs and explicit predicates.
  • Remove client-provided forwarding, identity, and internal headers before creating trusted values.
  • Keep path and host rewriting visible and covered by tests.
  • Authenticate at the edge and authorize again in downstream services.
  • Relay tokens only to services with the intended audience.
  • Rate-limit by authenticated identity or a verified API key, not an untrusted address header.
  • Set global connection and response timeouts with narrow route overrides.
  • Retry only proven idempotent operations and only before response commitment.
  • Keep fallbacks bounded and expose sustained upstream failure.
Show full SKILL.md (169 more words)Show less

Testing and operations

  • Test predicates, filters, trusted headers, CORS, timeouts, body limits, and status mapping.
  • Use a controlled upstream server rather than mocking gateway internals.
  • Record route ID, outcome, latency, and upstream failure with bounded metric tags.
  • Test each selected runtime with its matching Spring Cloud Gateway test support.

Examples

  • examples/good-routes.yml shows Gateway 5 WebFlux configuration.
  • examples/good-webmvc-routes.yml shows Gateway 5 Web MVC configuration.
  • examples/bad-routes.yml preserves the stale configuration as a warning.

Official sources

Gotchas

  • Agent uses spring.cloud.gateway.routes on Gateway 5 - use the server-specific namespace.
  • Agent uses spring-cloud-starter-gateway on Boot 4 - select the WebFlux or Web MVC server starter.
  • Agent selects a Cloud train without checking the exact Boot line - use the compatibility matrix.
  • Agent trusts a public identity header - derive identity after authentication.
  • Agent retries POST requests automatically - retry only proven idempotent operations.
  • Agent puts business orchestration in filters - keep domain logic downstream.
  • Agent omits response timeouts - stalled upstreams can exhaust resources.

© rrezartprebreza, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

SKILL.md and 4 other files in skills/spring-boot-4/spring-cloud-gateway of rrezartprebreza/spring-boot-skills.

  • SKILL.md
  • agents/openai.yaml
  • examples/bad-routes.yml
  • examples/good-routes.yml
  • examples/good-webmvc-routes.yml

Open the folder on GitHubat commit f0c06a0

Compare with similar skills

Spring Cloud Gateway next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Spring Cloud Gateway compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Spring Cloud Gateway this skillrrezartprebreza/spring-boot-skills301—~1.1kAutomated safety check: PassMIT
Springboot Securityaffaan-m/ECC276k5 repos~2kAutomated safety check: PassMIT
Spring Bootpiomin/claude-ai-spring-boot1.3k—~2kAutomated safety check: PassApache-2.0
Dr Jskilljdubois/dr-jskill342—~4.6kAutomated safety check: NotesApache-2.0
WxJava Integration Guidebinarywang/WxJava33k—~123Automated safety check: PassApache-2.0
Grails Developer Guideapache/grails-core2.9k—~4.9kAutomated safety check: PassApache-2.0

Similar skills

  • Spring Security best practices for authn/authz, validation, CSRF, secrets, headers, rate limiting, and dependency security in Java Spring Boot services.

    276k GitHub starsUsed in 5 repos~2k tokens
    Backend & APIsAuto-check passed
  • Spring Boot

    piomin/claude-ai-spring-boot

    Spring Boot 3.x development - REST APIs, JPA, Security, Testing, and Cloud-native patterns.

    1.3k GitHub stars~2k tokensUpdated 5 mo ago
    Backend & APIsAuto-check passed
  • Dr Jskill

    jdubois/dr-jskill

    Creates Java + Spring Boot projects: Web applications, full-stack apps with Vue.js or Angular or React or vanilla JS, PostgreSQL, REST APIs, and Docker.

    342 GitHub stars~4.6k tokensUpdated 10 days ago
    Backend & APIsAuto-check: notes
  • WxJava Integration Guide

    binarywang/WxJava

    Plans a WxJava setup for Java, Spring Boot or Solon projects that call WeChat services, from module and BOM choice to config and a minimal working call.

    33k GitHub stars~123 tokensUpdated today
    Backend & APIsAuto-check passed
  • Grails Developer Guide

    apache/grails-core

    Guides building Grails web applications and REST APIs with GORM, controllers, services, views, plugins and Spock and Geb testing.

    2.9k GitHub stars~4.9k tokensUpdated today
    Backend & APIsAuto-check passed
  • Flycms Dev

    sunkaifei/FlyCms

    FlyCms 项目(backend/ Spring Boot 4.1.1 + frontend/ vue-vben-admin v5)的架构地图与开发规范总纲。凡在本仓库做任何开发——写后端接口、新增/修改模块、管理页面、数据库变更、修 bug、重构——都要先加载本 skill 再动手,即使用户只说"改一下""加个功能";前端登录/菜单/权限专项另见…

    656 GitHub stars~827 tokensUpdated yesterday
    Backend & APIsAuto-check passed

More from rrezartprebreza/spring-boot-skills

All 51 skills in this repo
  • AI Observability

    rrezartprebreza/spring-boot-skills

    A skill your agent uses when adding Spring AI-specific model observations, token usage, latency, externally configured cost attribution, advisor telemetry, or protected prompt and completion logging.

    301 GitHub stars~1.6k tokensUpdated 18 days ago
    Auto-check passed
  • API Versioning

    rrezartprebreza/spring-boot-skills

    A skill your agent uses when versioning Spring MVC or WebFlux APIs in Spring Boot 3 / Spring Framework 6.

    301 GitHub stars~516 tokensUpdated 18 days ago
    Auto-check passed
  • API Versioning

    rrezartprebreza/spring-boot-skills

    A skill your agent uses when versioning Spring MVC or WebFlux APIs in Spring Boot 4 / Spring Framework 7.

    301 GitHub stars~643 tokensUpdated 18 days ago
    Auto-check passed
  • Container Native Deployment

    rrezartprebreza/spring-boot-skills

    A skill your agent uses when packaging a Spring Boot 3 application as an OCI image or GraalVM native executable.

    301 GitHub stars~781 tokensUpdated 18 days ago
    Auto-check passed
  • Container Native Deployment

    rrezartprebreza/spring-boot-skills

    A skill your agent uses when packaging Spring Boot 4 as an OCI image, JVM container, AOT application, or GraalVM native executable.

    301 GitHub stars~706 tokensUpdated 18 days ago
    Auto-check passed
  • Domain Driven Design

    rrezartprebreza/spring-boot-skills

    A skill your agent uses when evolving aggregate invariants, value objects or domain events in an existing DDD-style Spring Boot 3 application, or when DDD is explicitly requested.

    301 GitHub stars~2.1k tokensUpdated 18 days ago
    Auto-check passed

Works with

Categories

Questions about Spring Cloud Gateway

What does Spring Cloud Gateway do?

A skill your agent uses when building Spring Cloud Gateway 5 on Spring Boot 4, including WebFlux or Web MVC routes, edge authentication, trusted headers, rate limits, timeouts, and resilience. Spring Cloud Gateway is an agent skill from rrezartprebreza/spring-boot-skills. Use when building Spring Cloud Gateway 5 on Spring Boot 4, including WebFlux or Web MVC routes, edge authentication, trusted headers, rate limits, timeouts, and resilience.

When should I use Spring Cloud Gateway?

Spring Cloud Gateway fits situations like: building Spring Cloud Gateway 5 on Spring Boot 4; including WebFlux; edge authentication; trusted headers.

How do I install Spring Cloud Gateway in Claude Code?

Run `npx skills add rrezartprebreza/spring-boot-skills --skill spring-cloud-gateway -a claude-code`. Or copy the skill folder (skills/spring-boot-4/spring-cloud-gateway in rrezartprebreza/spring-boot-skills) into .claude/skills/spring-cloud-gateway in your project. Claude Code loads it when a task matches its description.

How do I install Spring Cloud Gateway in Codex?

Run `npx skills add rrezartprebreza/spring-boot-skills --skill spring-cloud-gateway -a codex`. Or copy the skill folder (skills/spring-boot-4/spring-cloud-gateway in rrezartprebreza/spring-boot-skills) into .agents/skills/spring-cloud-gateway in your project. Codex loads it when a task matches its description.

Can I use Spring Cloud Gateway in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add rrezartprebreza/spring-boot-skills --skill spring-cloud-gateway -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/spring-cloud-gateway, .gemini/skills/spring-cloud-gateway, .github/skills/spring-cloud-gateway and .opencode/skills/spring-cloud-gateway in your project.

What does Spring Cloud Gateway need to run?

SKILL.md names no scripts, command-line tools or credentials: Spring Cloud Gateway is instructions for the agent only.

Does Spring Cloud Gateway access the network?

SKILL.md names 2 domains. As links in the text: docs.spring.io and spring.io. This is read from the text; nothing was executed.

Is Spring Cloud Gateway safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Spring Cloud Gateway use?

Spring Cloud Gateway is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Spring Cloud Gateway use?

About 1.1k tokens (SKILL.md is roughly 4.3k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Spring Cloud Gateway?

Skills that share tags, products or a category with Spring Cloud Gateway: Springboot Security (affaan-m/ECC, 276k stars), Spring Boot (piomin/claude-ai-spring-boot, 1.3k stars), Dr Jskill (jdubois/dr-jskill, 342 stars) and WxJava Integration Guide (binarywang/WxJava, 33k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Spring Cloud Gateway?

rrezartprebreza (a GitHub user) maintains it in rrezartprebreza/spring-boot-skills, which has 301 GitHub stars. The repository holds 51 skills in this directory. The repository was last updated on September 21, 2026.

Source: rrezartprebreza/spring-boot-skills on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.