官术网_书友最值得收藏!

Spring Security terminologies

It's important to understand some of the most important Spring Security terminologies. Let's look at some of them:

  • Principal: Any user, device, or system (application) that would like to interact with your application.
  • Authentication: A process by which your application makes sure that the principal is who they claim to be.
  • Credentials: When a principal tries to interact with your application, the authentication process kicks in and challenges the principal to pass on some values. One such example is a username/password combination and these values are called credentials. The authentication process validates the principal's passed-in credentials against a data store and replies back with the appropriate result.
  • Authorization: After successful authentication, the principal is checked again for actions that it can perform on your application. This process of checking rights for a principal and then granting necessary permissions is called authorization.
  • Secured item/resource: The item or resource that is marked as secured and requires the principal (user) to successfully complete both authentication and authorization.
  • GrantedAuthority: A Spring Security object (org.springframework.security.core.GrantedAuthority interface) that contains/holds permissions/access-right details of a principal.
  • SecurityContext: A Spring Security object that holds a principal's authentication details.
主站蜘蛛池模板: 茂名市| 榆中县| 凌云县| 余庆县| 乐安县| 环江| 桐城市| 轮台县| 汾西县| 淄博市| 武宣县| 元谋县| 凌海市| 礼泉县| 保德县| 佛教| 阿城市| 海盐县| 防城港市| 汤阴县| 武陟县| 张家港市| 安国市| 诸暨市| 松江区| 平昌县| 任丘市| 锦州市| 抚远县| 胶南市| 高碑店市| 沾益县| 崇信县| 阿城市| 年辖:市辖区| 洪江市| 神农架林区| 四会市| 江陵县| 大方县| 繁昌县|