# Package org.springframework.security.web.authentication

package org.springframework.security.web.authentication
Authentication processing mechanisms, which respond to the submission of authentication credentials using various protocols (eg BASIC, CAS, form login etc).

Related Packages
Package
Description
org.springframework.security.web
Spring Security's web security module.
org.springframework.security.web.authentication.logout
Logout functionality based around a filter which handles a specific logout URL.
org.springframework.security.web.authentication.ott
org.springframework.security.web.authentication.password
org.springframework.security.web.authentication.preauth
Support for "pre-authenticated" scenarios, where Spring Security assumes the incoming request has already been authenticated by some externally configured system.
org.springframework.security.web.authentication.rememberme
Support for remembering a user between different web sessions.
org.springframework.security.web.authentication.session
Strategy interface and implementations for handling session-related behaviour for a newly authenticated user.
org.springframework.security.web.authentication.switchuser
Provides HTTP-based "switch user" (su) capabilities.
org.springframework.security.web.authentication.ui
Authentication user-interface rendering code.
org.springframework.security.web.authentication.www
WWW-Authenticate based authentication mechanism implementations: Basic and Digest authentication.
Class
Description
AbstractAuthenticationProcessingFilter
Abstract processor of browser-based HTTP-based authentication requests.
AbstractAuthenticationTargetUrlRequestHandler
Base class containing the logic used by strategies which handle redirection to a URL and are passed an `Authentication` object as part of the contract.
AnonymousAuthenticationFilter
Detects if there is no `Authentication` object in the `SecurityContextHolder`, and populates it with one if needed.
AuthenticationConverter
A strategy used for converting from a `HttpServletRequest` to an `Authentication` of particular type.
AuthenticationEntryPointFailureHandler
Adapts a `AuthenticationEntryPoint` into a `AuthenticationFailureHandler`
AuthenticationFailureHandler
Strategy used to handle a failed authentication attempt.
AuthenticationFilter
A `Filter` that performs authentication of a particular request.
AuthenticationSuccessHandler
Strategy used to handle a successful user authentication.
DelegatingAuthenticationConverter
A `AuthenticationConverter`, that iterates over multiple `AuthenticationConverter`.
DelegatingAuthenticationEntryPoint
An `AuthenticationEntryPoint` which selects a concrete `AuthenticationEntryPoint` based on a `RequestMatcher` evaluation.
DelegatingAuthenticationFailureHandler
An `AuthenticationFailureHandler` that delegates to other `AuthenticationFailureHandler` instances based upon the type of `AuthenticationException` passed into `DelegatingAuthenticationFailureHandler.onAuthenticationFailure(HttpServletRequest, HttpServletResponse, AuthenticationException)` .
ExceptionMappingAuthenticationFailureHandler
Uses the internal map of exceptions types to URLs to determine the destination on authentication failure.
ForwardAuthenticationFailureHandler
Forward Authentication Failure Handler
ForwardAuthenticationSuccessHandler
Forward Authentication Success Handler
Http403ForbiddenEntryPoint
In the pre-authenticated authentication case (unlike CAS, for example) the user will already have been identified through some external mechanism and a secure context established by the time the security-enforcement filter is invoked.
HttpMessageConverterAuthenticationSuccessHandler
An `AuthenticationSuccessHandler` that writes a JSON response with the redirect URL and an authenticated status similar to: `{ "redirectUrl": "/user/profile", "authenticated": true }`
HttpMessageConverterAuthenticationSuccessHandler.AuthenticationSuccess
A response object used to write the JSON response for successful authentication.
HttpStatusEntryPoint
An `AuthenticationEntryPoint` that sends a generic `HttpStatus` as a response.
LoginUrlAuthenticationEntryPoint
Used by the `ExceptionTranslationFilter` to commence a form login authentication via the `UsernamePasswordAuthenticationFilter`.
NoOpAuthenticationEntryPoint
An `AuthenticationEntryPoint` implementation that does nothing.
NullRememberMeServices
Implementation of `NullRememberMeServices` that does nothing.
RememberMeServices
Implement by a class that is capable of providing a remember-me service.
RequestMatcherDelegatingAuthenticationManagerResolver
An `AuthenticationManagerResolver` that returns a `AuthenticationManager` instances based upon the type of `HttpServletRequest` passed into `RequestMatcherDelegatingAuthenticationManagerResolver.resolve(HttpServletRequest)`.
RequestMatcherDelegatingAuthenticationManagerResolver.Builder
A builder for `RequestMatcherDelegatingAuthenticationManagerResolver`.
SavedRequestAwareAuthenticationSuccessHandler
An authentication success strategy which can make use of the `DefaultSavedRequest` which may have been stored in the session by the `ExceptionTranslationFilter`.
SimpleUrlAuthenticationFailureHandler
`AuthenticationFailureHandler` which performs a redirect to the value of the `defaultFailureUrl` property when the `onAuthenticationFailure` method is called.
SimpleUrlAuthenticationSuccessHandler
`AuthenticationSuccessHandler` which can be configured with a default URL which users should be sent to upon successful authentication.
UsernamePasswordAuthenticationFilter
Processes an authentication form submission.
WebAuthenticationDetails
A holder of selected HTTP details related to a web authentication request.
WebAuthenticationDetailsSource
Implementation of `AuthenticationDetailsSource` which builds the details object from an `HttpServletRequest` object, creating a `WebAuthenticationDetails` .