Every new Spring Boot project started the same way:

Configure Spring Security

Set up JWT Authentication

Handle CORS

Connect the frontend