Spring Security

Notes

  • ProviderManager.authenticate(Authentication) is the entry point for authentication.

    All available AuthenticationProvider beans can be examined here.

  • org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter.attemptAuthentication

    Performs HTTP-based authentication, and populates the Authentication object.

API

SecurityConfigurer

Cheatsheet

Enable debugging

@Configuration
@EnableWebSecurity(debug = true)
public class SecurityConfig extends WebSecurityConfigurerAdapter

References

SAMLOAuth