Hands-On Spring Security 5 for Reactive Applications

Multiple AuthenticationProvider

Spring Security allows you to declare multiple AuthenticationProvider in your application. They are executed according to the order in which they are declared in the configuration.

The jetty-in-memory-basic-custom-authentication project is modified further, and we have used the newly created CustomAuthenticationProvider as an AuthenticationProvider (Order 1) and the existing inMemoryAuthentication as our second AuthenticationProvider (Order 2):

@EnableWebSecurity@ComponentScan(basePackageClasses = CustomAuthenticationProvider.class)public class SpringSecurityConfig extends WebSecurityConfigurerAdapter {    @Autowired    CustomAuthenticationProvider customAuthenticationProvider;    @Override    protected void configure(HttpSecurity ...