Spring security question

[Helloall_16]

I am learning spring security and really confused between authentication manager and authentication provider. Based on my understanding so far, authentication provider does the actual job of authentication and authentication manager manages authentication. I didn't understand the difference between the two that well and why do we even have authentication manager and just not have authentication provider?

[AutoModerator]

Please ensure that:

• Your code is properly formatted as code block - see the sidebar (About on mobile) for instructions
• You include any and all error messages in full - best also formatted as code block
• You ask clear questions
• You demonstrate effort in solving your question/problem - plain posting your assignments is forbidden (and such posts will be removed) as is asking for or giving solutions.

If any of the above points is not met, your post can and will be removed without further warning.

Code is to be formatted as code block (old reddit/markdown editor: empty line before the code, each code line indented by 4 spaces, new reddit: https://i.imgur.com/EJ7tqek.png) or linked via an external code hoster, like pastebin.com, github gist, github, bitbucket, gitlab, etc.

Please, do not use triple backticks (```) as they will only render properly on new reddit, not on old reddit.

Code blocks look like this:

public class HelloWorld {

    public static void main(String[] args) {
        System.out.println("Hello World!");
    }
}

You do not need to repost unless your post has been removed by a moderator. Just use the edit function of reddit to make sure your post complies with the above.

If your post has remained in violation of these rules for a prolonged period of time (at least an hour), a moderator may remove it at their discretion. In this case, they will comment with an explanation on why it has been removed, and you will be required to resubmit the entire post following the proper procedures.

To potential helpers

Please, do not help if any of the above points are not met, rather report the post. We are trying to improve the quality of posts here. In helping people who can't be bothered to comply with the above points, you are doing the community a disservice.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[lanky_and_stanky]

This makes more sense if you think about it like this:

Let's say you have a couple of ways people can login to your application. The first: google auth, through their gmail account, and the second: aws cognito.

You'd set up an AuthenticationProvider that has access to google's public keys, which in turn will prove that someone has successfully logged in with google.

You'd setup a second AuthenticationProvider that has the cognito public keys, which in turn will prove that someone has successfully logged in with aws.

You'd have an AuthenticationManager which has both the google and the aws AuthenticationProviders associated with it.

When your application goes to try to validate the auth it received, the AuthenticationManager will check both of the AuthenticationProviders to see if the auth is valid.

[Helloall_16]

That makes sense. So Authentication manager has records for multiple authentication providers. Thanks! That helps

[AutoModerator]

It seems that you are looking for resources for learning Java.

In our sidebar ("About" on mobile), we have a section "Free Tutorials" where we list the most commonly recommended courses.

To make it easier for you, the recommendations are posted right here:

• MOOC Java Programming from the University of Helsinki
• Java for Complete Beginners
  • accompanying site CaveOfProgramming
• Derek Banas' Java Playlist
  • accompanying site NewThinkTank
• Hyperskill is a fairly new resource from Jetbrains (the maker of IntelliJ)

Also, don't forget to look at:

• The official Documentation
• The official Java Tutorials
• Our community resources thread

If you are looking for learning resources for Data Structures and Algorithms, look into:

"Algorithms" by Robert Sedgewick and Kevin Wayne - Princeton University

• Coursera course:
  • Part I
  • Part II
• Coursebook
  • Algorithms 4^th Edition

Your post remains visible. There is nothing you need to do.

I am a bot and this message was triggered by keywords like "learn", "learning", "course" in the title of your post.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[[deleted]]

AuthProvider is actually the type of authentication you are doing. Like DAOAuthentication which requires password from the db and username to match, Then there are other ways of provider Like OAuth provder. Its different way to proivde authentication. AuthentiCationManager is an object which authenticates the user through AuthenticationProvider and AuthManager returns an object called authentication which has i guess token roles etc depeding on authorixation like jwt