Spring
Why Spring
Overview Microservices Reactive Event Driven Cloud Web Applications Serverless Batch
Learn
Overview Quickstart Guides Blog
Projects
Overview Spring Boot Spring Framework Spring Cloud Spring Cloud Data Flow Spring Data Spring Integration Spring Batch Spring Security View all projects Spring Tools 4 Spring Initializr
Training Support
Community
Overview Events Team

Spring Security

    • Prerequisites
    • Community
    • What’s New
    • Getting Spring Security
    • Features
      • Authentication
        • Password Storage
      • Protection Against Exploits
        • CSRF
        • HTTP Headers
        • HTTP Requests
    • Project Modules and Dependencies
    • Samples
    • Servlet Applications
      • Getting Started
      • The Big Picture
      • Authentication
        • Authentication Architecture
        • Username/Password
          • Reading Username/Password
            • Form
            • Form
            • Digest
          • Password Storage
            • In Memory
            • JDBC
            • UserDetails
            • UserDetailsService
            • PasswordEncoder
            • DaoAuthenticationProvider
            • LDAP
        • Session Management
        • Remember Me
        • OpenID Support
        • Anonymous
        • Pre-Authentication
        • JAAS
        • CAS
        • X509
        • Run-As
        • Logout
        • Authentication Events
      • Authorization
        • Authorization Architecture
        • Authorize HTTP Requests
        • Expression-Based Access Control
        • Secure Object Implementations
        • Method Security
        • Domain Object Security (ACLs)
      • OAuth2
        • OAuth2 Log In
        • OAuth2 Client
        • OAuth2 Resource Server
      • SAML 2
      • Protection Against Exploits
        • CSRF
        • HTTP Headers
        • HTTP Requests
        • Firewall
      • Integrations
        • Servlet APIs
        • Spring Data
        • Java’s Concurrency APIs
        • Jackson
        • Localization
        • Spring MVC
        • WebSocket
        • Spring CORS Support
        • JSP Taglib
      • Configuration
        • Java Configuration
        • Kotlin Configuration
        • Security Namespace Configuration
      • Testing
        • Testing Method Security
        • Spring MVC Test Integration
      • Cryptography
      • Appendix
        • Proxy Server Configuration
        • Security Database Schema
        • The Security Namespace
        • Spring Security FAQ
    • Reactive Applications
      • WebFlux Security
      • Project Against Exploits
        • CSRF
        • Headers
        • HTTP Requests
      • OAuth2
        • OAuth 2.0 Login
        • OAuth2 Client
        • OAuth 2.0 Resource Server
        • @RegisteredOAuth2AuthorizedClient
      • X.509
      • WebClient
      • EnableReactiveMethodSecurity
      • CORS
      • Testing
      • RSocket
Spring Security 5.5
  • Spring Security
    • 5.6
    • 5.5
  • Spring Session
    • 2.6
  • Spring Security
  • Features
  • Authentication
5.6 5.5
Edit this Page

There is a newer version available. Please update to Spring Security 5.6!

Authentication Support

Spring Security provides built in support for authenticating users. Refer to the sections on authentication for Servlet and WebFlux for details on what is supported for each stack.

Getting Spring Security Password Storage
Spring

© VMware, Inc. or its affiliates. Terms of Use • Privacy • Trademark Guidelines • Thank you • Your California Privacy Rights • Cookie Settings

Apache®, Apache Tomcat®, Apache Kafka®, Apache Cassandra™, and Apache Geode™ are trademarks or registered trademarks of the Apache Software Foundation in the United States and/or other countries. Java™, Java™ SE, Java™ EE, and OpenJDK™ are trademarks of Oracle and/or its affiliates. Kubernetes® is a registered trademark of the Linux Foundation in the United States and other countries. Linux® is the registered trademark of Linus Torvalds in the United States and other countries. Windows® and Microsoft® Azure are registered trademarks of Microsoft Corporation. “AWS” and “Amazon Web Services” are trademarks or registered trademarks of Amazon.com Inc. or its affiliates. All other trademarks and copyrights are property of their respective owners and are only mentioned for informative purposes. Other names may be trademarks of their respective owners.