# Package org.springframework.security.core

package org.springframework.security.core
Core classes and interfaces related to user authentication and authorization, as well as the maintenance of a security context.

Related Packages
Package
Description
org.springframework.security.core.annotation
org.springframework.security.core.authority
The default implementation of the `GrantedAuthority` interface.
org.springframework.security.core.context
Classes related to the establishment of a security context for the duration of a request (such as an HTTP or RMI invocation).
org.springframework.security.core.parameters
org.springframework.security.core.session
Session abstraction which is provided by the `org.springframework.security.core.session.SessionInformation SessionInformation` class.
org.springframework.security.core.token
A service for building secure random tokens.
org.springframework.security.core.userdetails
The standard interfaces for implementing user data DAOs.
Class
Description
AuthenticatedPrincipal
Representation of an authenticated `Principal` once an `Authentication` request has been successfully authenticated by the `AuthenticationManager.authenticate(Authentication)` method.
Authentication
Represents the token for an authentication request or for an authenticated principal once the request has been processed by the `AuthenticationManager.authenticate(Authentication)` method.
AuthenticationException
Abstract superclass for all exceptions related to an `Authentication` object being invalid for whatever reason.
CredentialsContainer
Indicates that the implementing object contains sensitive data, which can be erased using the `eraseCredentials` method.
GrantedAuthority
Represents an authority granted to an `Authentication` object.
SpringSecurityCoreVersion
Internal class used for checking version compatibility in a deployed application.
SpringSecurityMessageSource
The default `MessageSource` used by Spring Security.
Transient
A marker for `Authentication`s that should never be stored across requests, for example a bearer token authentication