Authentication result = provider.authenticate(authentication);
AbstractUserDetailsAuthenticationProvider#authenticate(authentication)
String username = AbstractUserDetailsAuthenticationProvider#determineUsername
authentication.getPrincipal() == null ? "NONE_PROVIDED" : authentication.getName()
UserDetails user = this.userCache.getUserFromCache(username)
user = DaoAuthenticationProvider#retrieveUser(username, authentication)
List<UserDetails> users = JdbcDaoImpl#loadUserByUsername(username)
"select username,password,enabled from users where username = ?"
UserDetails user = (UserDetails)users.get(0)
Set<GrantedAuthority> dbAuthsSet<br>List<GrantedAuthority> dbAuths = new ArrayList(dbAuthsSet);
JdbcDaoImpl#loadUserAuthorities(username)
"select username,authority from authorities where username = ?"
JdbcDaoImpl#loadGroupAuthorities(username)
"select g.id, g.group_name, ga.authority from groups g, group_members gm, group_authorities ga where gm.username = ? and g.id = ga.group_id and g.id = gm.group_id"
JdbcDaoImpl#addCustomAuthorities(user.getUsername(), dbAuths)
JdbcDaoImpl#createUserDetails(username, user, dbAuths)
new User(returnUsername, userFromUserQuery.getPassword(), userFromUserQuery.isEnabled(), userFromUserQuery.isAccountNonExpired(), userFromUserQuery.isCredentialsNonExpired(), userFromUserQuery.isAccountNonLocked(), combinedAuthorities)
DefaultPreAuthenticationChecks#check(user)
user.isAccountNonLocked()
user.isEnabled()
user.isAccountNonExpired()
DaoAuthenticationProvider#additionalAuthenticationChecks
passwordEncoder.matches(authentication.getCredentials().toString(), userDetails.getPassword())
userCache.putUserInCache(user)
DaoAuthenticationProvider#createSuccessAuthentication(principalToReturn, authentication, user)
