Package org.springframework.security.authentication

Core classes and interfaces related to user authentication, which are used throughout Spring Security.

Of key importance is the AuthenticationManager and its default implementation ProviderManager, which maintains a list AuthenticationProviders to which it delegates authentication requests.

Interface Summary

Interface	Description
AuthenticationDetailsSource<C,T>	Provides a Authentication.getDetails() object for a given web request.
AuthenticationEventPublisher
AuthenticationManager	Processes an Authentication request.
AuthenticationManagerResolver<C>	An interface for resolving an AuthenticationManager based on the provided context
AuthenticationProvider	Indicates a class can process a specific Authentication implementation.
AuthenticationTrustResolver	Evaluates Authentication tokens
ReactiveAuthenticationManager	Determines if the provided Authentication can be authenticated.
ReactiveAuthenticationManagerResolver<C>	An interface for resolving a ReactiveAuthenticationManager based on the provided context

Class Summary

Class	Description
AbstractAuthenticationToken	Base class for Authentication objects.
AbstractUserDetailsReactiveAuthenticationManager	A base ReactiveAuthenticationManager that allows subclasses to override and work with UserDetails objects.
AccountStatusUserDetailsChecker
AnonymousAuthenticationProvider	An AuthenticationProvider implementation that validates AnonymousAuthenticationTokens.
AnonymousAuthenticationToken	Represents an anonymous Authentication.
AuthenticationTrustResolverImpl	Basic implementation of AuthenticationTrustResolver.
CachingUserDetailsService
DefaultAuthenticationEventPublisher	The default strategy for publishing authentication events.
DelegatingReactiveAuthenticationManager	A ReactiveAuthenticationManager that delegates to other ReactiveAuthenticationManager instances using the result from the first non empty result.
ProviderManager	Iterates an Authentication request through a list of AuthenticationProviders.
ReactiveAuthenticationManagerAdapter	Adapts an AuthenticationManager to the reactive APIs.
RememberMeAuthenticationProvider	An AuthenticationProvider implementation that validates RememberMeAuthenticationTokens.
RememberMeAuthenticationToken	Represents a remembered Authentication.
TestingAuthenticationProvider	An AuthenticationProvider implementation for the TestingAuthenticationToken.
TestingAuthenticationToken	An Authentication implementation that is designed for use whilst unit testing.
UserDetailsRepositoryReactiveAuthenticationManager	A ReactiveAuthenticationManager that uses a ReactiveUserDetailsService to validate the provided username and password.
UsernamePasswordAuthenticationToken	An Authentication implementation that is designed for simple presentation of a username and password.

Exception Summary

Exception	Description
AccountExpiredException	Thrown if an authentication request is rejected because the account has expired.
AccountStatusException	Base class for authentication exceptions which are caused by a particular user account status (locked, disabled etc).
AuthenticationCredentialsNotFoundException	Thrown if an authentication request is rejected because there is no Authentication object in the SecurityContext.
AuthenticationServiceException	Thrown if an authentication request could not be processed due to a system problem.
BadCredentialsException	Thrown if an authentication request is rejected because the credentials are invalid.
CredentialsExpiredException	Thrown if an authentication request is rejected because the account's credentials have expired.
DisabledException	Thrown if an authentication request is rejected because the account is disabled.
InsufficientAuthenticationException	Thrown if an authentication request is rejected because the credentials are not sufficiently trusted.
InternalAuthenticationServiceException	Thrown if an authentication request could not be processed due to a system problem that occurred internally.
LockedException	Thrown if an authentication request is rejected because the account is locked.
ProviderNotFoundException	Thrown by ProviderManager if no AuthenticationProvider could be found that supports the presented Authentication object.