This is an old revision of the document!


Spring Security

SpringBoot 기준으로 서술

Overview

  • Authentication : 인증. “유효한 사용자인가?”
  • Authorization : 허가(권한 부여). 유효한 사용자가 이 작업을 할 수 있는가?

Documents

Authentication

Docs

classDiagram class AuthenticationManager { Authentication authenticate(Authentication authentication) } class AuthenticationProvider { Authentication authenticate(Authentication authentication) boolean supports(Class authentication) } AuthenticationProvider <|-- ProviderManager AuthenticationManager --> AuthenticationProvider : authRequest link AuthenticationManager "<a href='https://docs.spring.io/spring-security/site/docs/current/api/org/springframework/security/authentication/AuthenticationManager.html' class='urlextern' title='https://docs.spring.io/spring-security/site/docs/current/api/org/springframework/security/authentication/AuthenticationManager.html' rel='ugc nofollow'>https://docs.spring.io/spring-security/site/docs/current/api/org/springframework/security/authentication/AuthenticationManager.html</a>" "Docs" link AuthenticationProvider "<a href='https://docs.spring.io/spring-security/site/docs/4.2.20.RELEASE/apidocs/org/springframework/security/authentication/AuthenticationProvider.html' class='urlextern' title='https://docs.spring.io/spring-security/site/docs/4.2.20.RELEASE/apidocs/org/springframework/security/authentication/AuthenticationProvider.html' rel='ugc nofollow'>https://docs.spring.io/spring-security/site/docs/4.2.20.RELEASE/apidocs/org/springframework/security/authentication/AuthenticationProvider.html</a>" "Docs" link ProviderManager "<a href='https://docs.spring.io/spring-security/site/docs/4.2.20.RELEASE/apidocs/org/springframework/security/authentication/ProviderManager.html' class='urlextern' title='https://docs.spring.io/spring-security/site/docs/4.2.20.RELEASE/apidocs/org/springframework/security/authentication/ProviderManager.html' rel='ugc nofollow'>https://docs.spring.io/spring-security/site/docs/4.2.20.RELEASE/apidocs/org/springframework/security/authentication/ProviderManager.html</a>"

Authorization

Protection Against Exploits

back-end/spring/security.1619447171.txt.gz · Last modified: 2021/04/26 15:26 by ledyx