Create the security configuration file by extending the WebSecurityConfigurerAdapter to restrict users from access specific screens unless they are logged in.

Implement a custom authentication provider to authorize users by getting there username and password and then check if they are registered users

Create controller classes to handle front end calls

Create POJO classes that are equivalent to the database schema with field names and data type matching that of the schema

Implement MyBatis mapper interfaces for all the POJO classes created. These classes should support the CRUD(Create, Read, Update, Delete) Operations