Spring Security Custom Authentication Provider

In this lesson of #springsecurity, we will see how to configure custom #authenticationproviders in your #spring or #springboot application. Authentication providers are core part of Spring security. There are multiple #authenticationprovider available OTB by Spring Security.
There are few cases where the default authentication providers will not meet our requirements. Spring security flexible #authencation architecure allow us to easily create and configure custom authentication provider.
This lesson covers how to create #customauthenitcationprovider and how to configure it for your spring security application.
Spring security tutorial : www.javadevjournal.com/spring...
Spring Security Multiple Authentication Providers : www.javadevjournal.com/spring...
Spring Security Custom Authentication Provider: www.javadevjournal.com/spring...
#springboot #springsecuritycourse #springsecuritytutorial #springsecuritytutorials #springframework #security #providermanager #springmvc #authentication

[@hkkabir2024]

do you have the latest configuration without using webconfigueradaptor ? it's depreciated and i am stuck here for implanting the config of authentication provider

[@SKtheGEEK]

Hi, I have added the ant matches for checking if a user role is allowed for the method. But what if I want to do a checking on the parameters as well. Let's say the south region manager is not allowed to insert any record with a place id that is from the northern region. So how do I stop this method at the authentication service?

[@javadevjournal]

I believe you are referring to the method level security annotation, if that is the case, You can create custom PermissionEvaluator to handle it

[@SagirAnsari-bn7oj]

Hi Can you make video on The Spring Authorization Server

[@preetigupta7753]

What if we need to support both kind of providers, custom and dao?

[@javadevjournal]

You can always setup multiple auth provider with Spring security

[@bluex217]

Hey my friend have you tried to create custom Provider with the new SecurityFilterChain since WebSecurityConfigurerAdapter is deprecated? I've tried so many approaches for 2 days now and I can't even get DAOAuthenticartionProvider to work with SecurityFilterChain using HttpBasic auth. Even when my UserDetailsService is invoked on authentication, it seems it is not setup as the principal

[@ramabookstroremalang9131]

Hello there. I've just tried your website a couple minutes ago, but it can't be accessed.

[@javadevjournal]

Thanks Rama for informing the issue. This is fixed and you should be able to access the URLs

[@ramabookstroremalang9131]

@@javadevjournal Okay, thank you. I've got many lessons from your website :)

[@javadevjournal]

@@ramabookstroremalang9131 happy that it is helpful to you.

[@user-hi4mq4tr3s]

webSecurityConfigurerAdapter now deprecated

[@javadevjournal]

Thanks and Agree, I have updated the related post..need to see if I can update the video.

[@PetraUdovicic]

@@javadevjournal Hello, I'm trying to find a link related to the update you're talking about and I can't find it. Help pls. :)

[@bobHAYES21]

​@@PetraUdovicic that is used instead @WebSecurutyAdapter

[@MaximZemlyanoy]

WebSecurityConfigurerAdapter is deprecated

[@javadevjournal]

yes but the workflow and other are still same