@PreAuthorizeIt

@PostAuthorize

@Secured

@EnableGlobalMethodSecurity

withUsername(...)

loadUserFromHolder(...)

getUserByName(...)

loadUserByUsername(...)

ProviderManager

SecurityContextHolder

UserDetailsService

AuthenticationManagerBuilder

UsernamePasswordAuthenticationToken

ProviderManager

SecurityContextHolder

UserDetailsService

URL "/logout" and http method POST

URL "/logout" and http method GET

URL "/exit" and http method POST

URL "/close" and http method POST

URL "/close" and http method GET

/login-form

/form-login

/login-page

/login

/authenticate

extend WebSecurityConfigurerAdapter class and

then override the configure(...)

method

implement AuthenticationManager interface and then override the authenticate(...)

method

extend AbstractAuthenticationFilterConfigurer class and

then override the customize(...)

method

implement AuthenticationManager interface and then override the commence(...)

method

@EnableSpringSecurity

@Secured

@Configuration

@EnableGlobalMethodSecurity

@EnableWebSecurity

only for authentication process

none of above

only for authorization process

for authentication and authorization processes