This is an old revision of the document!


Spring Security

SpringBoot 기준으로 서술

Overview

  • Authentication : 인증. “유효한 사용자인가?”
  • Authorization : 허가(권한 부여). 유효한 사용자가 이 작업을 할 수 있는가?

Documents

Authentication

Docs

classDiagram class AuthenticationManager { authenticate(Authentication authentication) Authentication } class AuthenticationProvider { authenticate(Authentication authentication) Authentication supports(Class~?~ authentication) boolean } class UserDetailsService { loadUserByUsername(String username) UserDetails } class UserDetails AuthenticationProvider <|-- ProviderManager AuthenticationManager --> AuthenticationProvider : authRequest AuthenticationManager <.. UserDetailsService : 서비스 주입 후 authenticate()에서 사용자 정보를 꺼내어 사용 UserDetailsService -- UserDetails

Authorization

Protection Against Exploits

back-end/spring/security.1619451161.txt.gz · Last modified: 2021/04/26 16:32 by ledyx