concept userdetailsservice in category spring

This is an excerpt from Manning's book Spring Security in Action MEAP V07. Login to get full access to this book.

You’ll learn in this section how to configure a UserDetailsService and PasswordEncoder. These two components both take part in authentication, and applications customize these depending on its requirements. While we’ll discuss details about customizing them in chapters 3 and 4, it’s essential to see how to plug in a custom implementation. The implementations we’ll use in this chapter are all provided by Spring Security.

Figure 2.3 The AuthenticationProvider implements the authentication logic. It receives the request from the AuthenticationManager and delegates finding the user to a UserDetailsService and verifying the password to a PasswordEncoder.

We’ll then learn in section 20.2 how to test the authorization configurations with users from a UserDetailsService.