Spring Security in Action

5 Implementing authentication

This chapter covers

• Implementing authentication logic using a custom AuthenticationProvider

• Using the HTTP Basic and form-based login authentication methods

• Understanding and managing the SecurityContext component

In chapters 3 and 4, we covered a few of the components acting in the authentication flow. We discussed UserDetails and how to define the prototype to describe a user in Spring Security. We then used UserDetails in examples where you learned how the UserDetailsService and UserDetailsManager contracts work and how you can implement these. We discussed and used the leading implementations of these interfaces in examples as well. Finally, you learned how a PasswordEncoder manages the passwords and ...