- Hands-On Spring Security 5 for Reactive Applications
- Tomcy John
- 192字
- 2021-07-23 18:59:16
Spring Security terminologies
It's important to understand some of the most important Spring Security terminologies. Let's look at some of them:
- Principal: Any user, device, or system (application) that would like to interact with your application.
- Authentication: A process by which your application makes sure that the principal is who they claim to be.
- Credentials: When a principal tries to interact with your application, the authentication process kicks in and challenges the principal to pass on some values. One such example is a username/password combination and these values are called credentials. The authentication process validates the principal's passed-in credentials against a data store and replies back with the appropriate result.
- Authorization: After successful authentication, the principal is checked again for actions that it can perform on your application. This process of checking rights for a principal and then granting necessary permissions is called authorization.
- Secured item/resource: The item or resource that is marked as secured and requires the principal (user) to successfully complete both authentication and authorization.
- GrantedAuthority: A Spring Security object (org.springframework.security.core.GrantedAuthority interface) that contains/holds permissions/access-right details of a principal.
- SecurityContext: A Spring Security object that holds a principal's authentication details.
推薦閱讀
- SASE原理、架構(gòu)與實踐
- 網(wǎng)絡(luò)安全保障能力研究
- 網(wǎng)絡(luò)安全應(yīng)急管理與技術(shù)實踐
- Getting Started with FortiGate
- 安全技術(shù)運營:方法與實踐
- 防火墻技術(shù)與應(yīng)用(第2版)
- 計算機網(wǎng)絡(luò)安全技術(shù)研究
- 空間群組密鑰管理研究:基于自主的深空DTN密鑰管理
- 網(wǎng)絡(luò)服務(wù)安全與監(jiān)控
- Kali Linux高級滲透測試(原書第4版)
- 捍衛(wèi)隱私
- 企業(yè)數(shù)據(jù)安全防護指南
- 網(wǎng)絡(luò)空間安全法律問題研究
- Developing Applications with Salesforce Chatter
- 互聯(lián)網(wǎng)域名國際化與安全技術(shù)導(dǎo)論