This is an old revision of the document!


Spring Security

SpringBoot 기준으로 서술

Overview

  • Authentication : 인증. “유효한 사용자인가?”
  • Authorization : 허가(권한 부여). 유효한 사용자가 이 작업을 할 수 있는가?

Documents

Authentication

Docs

  • 모두 Interface

classDiagram class AuthenticationManager { authenticate(Authentication authentication) Authentication } class AuthenticationProvider { authenticate(Authentication authentication) Authentication supports(Class~?~ authentication) boolean } class UserDetailsService { loadUserByUsername(String username) UserDetails } class UserDetails { getAuthorities() Collection~? extends GrantedAuthority~ getPassword() String isAccountNonExpired() boolean isAccountNonLocked() boolean isCredentialsNonExpired() boolean isEnabled() boolean } AuthenticationManager --> AuthenticationProvider : authRequest AuthenticationProvider <..> UserDetailsService : 서비스 주입 후 authenticate()에서 사용자 정보를 꺼내어 사용 UserDetailsService -- UserDetails

AuthenticationManager

AuthenticationProvider

UserDetailsService

Authorization

Protection Against Exploits

back-end/spring/security.1619536891.txt.gz · Last modified: 2021/04/27 16:21 by ledyx