Package org.springframework.security.core

@NullMarked package org.springframework.security.core

Core classes and interfaces related to user authentication and authorization, as well as the maintenance of a security context.

Related Packages

Package	Description
org.springframework.security.core.annotation
org.springframework.security.core.authority	The default implementation of the GrantedAuthority interface.
org.springframework.security.core.context	Classes related to the establishment of a security context for the duration of a request (such as an HTTP or RMI invocation).
org.springframework.security.core.parameters
org.springframework.security.core.session	Session abstraction which is provided by the org.springframework.security.core.session.SessionInformation SessionInformation class.
org.springframework.security.core.token	A service for building secure random tokens.
org.springframework.security.core.userdetails	The standard interfaces for implementing user data DAOs.

Class	Description
AuthenticatedPrincipal	Representation of an authenticated Principal once an Authentication request has been successfully authenticated by the AuthenticationManager.authenticate(Authentication) method.
Authentication	Represents the token for an authentication request or for an authenticated principal once the request has been processed by the AuthenticationManager.authenticate(Authentication) method.
Authentication.Builder<B extends Authentication.Builder<B>>	A builder based on a given Authentication instance
AuthenticationException	Abstract superclass for all exceptions related to an Authentication object being invalid for whatever reason.
CredentialsContainer	Indicates that the implementing object contains sensitive data, which can be erased using the eraseCredentials method.
GrantedAuthority	Represents an authority granted to an Authentication object.
SpringSecurityCoreVersion	Internal class used for checking version compatibility in a deployed application.
SpringSecurityMessageSource	The default MessageSource used by Spring Security.
Transient	A marker for Authentications that should never be stored across requests, for example a bearer token authentication