Menu
I am learning about Spring Security and I don't understand completly if I should use JdbcUserDetailsManager or a custom implementation of UserDetailsService. I am using a database for storing users.
I don't get what the JdbcUserDetailsManager gives you apart from a lot of methods, which I am not sure that I want to use? What if you have validations etc? Do you wrap it in a own implementation of UserDetailsService?
I mean, would you leak this manager class througout your application. Is it better to create your own?
623
The UserDetailsService interface is used to retrieve user-related data. It has one method named loadUserByUsername() which can be overridden to customize the process of finding the user. It is used by the DaoAuthenticationProvider to load details about the user during authentication.
Spring Security in Action MEAP V07 The JdbcUserDetailsManager manages the users in a SQL database. It connects to the database directly through JDBC. This way, the JdbcUserDetailsManager is independent of any other framework or specification related to database connectivity.
UserDetailsService is used by DaoAuthenticationProvider for retrieving a username, password, and other attributes for authenticating with a username and password. Spring Security provides in-memory and JDBC implementations of UserDetailsService .
AuthenticationManager is a static class that manages the authentication modules that an application uses. When a request is made to protected resources, the AuthenticationManager calls the Authenticate method to get an Authorization instance to use in subsequent requests.
There are some differences:
UserDetailsService is the core interface to load user details and is used by DaoAuthenticationProvider.UserDetailsService has a sub-interface the defines CRUD operations on the abstraction of a user: UserDetailsManager
JdbcDaoImpl is a JDBC implementation of UserDetailsService.JdbcUserDetailsManager is a JDBC implementation of UserDetailsManager and an extension of JdbcDaoImpl. It also provides the interface GroupManager
Based on the differences, it may affect how you decide which to use, expose, wrap or even implement.
116
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With
