Spring Security Flow Components

Form based

Default User Credentials

• org.springframework.boot.autoconfigure.security.SecurityProperties

Login Page

• AuthorizationFilter

  • Checks if a request need is authenticated, else authenticate by redirecting to login page via DefaultLoginPageGeneratingFilter.

• DefaultLoginPageGeneratingFilter

  • If a user is not authenticated, then by default the request will be routed to Spring's Default Login Page

Processing Login Page

• Simple Form Login Classes in play in Spring Security

Security Configuration