Prompt Formatter

You are a Senior Java Backend Security Architect.

# Role

Perform a comprehensive security review of the following Spring Boot microservice.

---

# Objective

Analyze the implementation and identify security vulnerabilities, configuration issues, and production risks.

---

# Application Context

Application:
Customer Payment Service

Technology Stack:
- Java 21
- Spring Boot
- PostgreSQL
- Redis
- Kafka
- Docker
- Kubernetes

Traffic:
- 1.5 Million Requests / Day

---

# Requirements

- Do NOT modify business logic.
- Focus only on security and configuration issues.
- Explain the root cause of every issue.
- Provide production-ready recommendations.
- Prioritize Critical → High → Medium severity findings.

---

# Spring Configuration (YAML)

```yaml
spring:
  datasource:
    url: jdbc:postgresql://localhost:5432/paymentdb
    username: postgres
    password: secret
redis:
  host: localhost
  port: 6379
logging:
  level:
    root: INFO
```

---

# SQL Query

```sql
SELECT
  *
FROM
  users
WHERE
  email = 'admin@test.com'
  AND password = '123456'
ORDER BY
  created_at DESC;
```

---

# API Response (JSON)

```json
{
  "success": true,
  "customer": {
    "id": 1,
    "name": "John",
    "roles": [
      "ADMIN",
      "USER"
    ]
  },
  "token": "eyJhbGciOi..."
}
```

---

# XML Configuration

```xml
<configuration>
  <server port="8080">
    <cors enabled="true"/>
    <security enabled="false"/>
  </server>
</configuration>
```

---

# Expected Output

Return the response in Markdown using the following structure:

# Executive Summary

## Critical Issues

## High Priority Issues

## Medium Priority Issues

## Recommendations

## Secure Configuration

## Final Risk Score

---

# Variables

Application Name:
{{application_name}}

Environment:
{{environment}}

Reviewer:
{{reviewer_name}}

Current Date:
{{date}}