Spring Security Introduction

Spring Security 为基于JEE的企业软件应用提供全面的安全服务。

用法（Maven）：
<dependency>
<groupId>org.springframework.security</groupId>
<artifactId>spring-security-web</artifactId>
<version>5.0.6.RELEASE</version>
</dependency>
<dependency>
<groupId>org.springframework.security</groupId>
<artifactId>spring-security-config</artifactId>
<version>5.0.6.RELEASE</version>
</dependency>

项目模块：
spring-security-core
spring-security-remoting
spring-security-web
spring-security-config
spring-security-ldap
spring-security-oahut2-*
spring-security-acl
spring-security-cas
spring-security-openid
spring-security-test

Java配置
@EnableWebSecurity
WebMvcConfigurer
configure(HttpSecurity http)

认证
内存认证
JDBC认证
LDAP认证
自定义认证
AuthenticationProvider
UserDetailsService

多重认证(Multiple HttpSecurity)
方法保护

核心组件
SecurityContextHolder
SecurityContext
Authentication
UserDetailsService
AuthenticationManager
ProviderManager
AuthenticationProvider
PasswordEncoder

Web认证
过滤器

参考：http://blog.didispace.com/xjf-spring-security-1/
https://docs.spring.io/spring-security/site/docs/5.0.6.RELEASE/reference/htmlsingle/#core-web-filters
https://www.jianshu.com/p/6307c89fe3fa