User credentials validation about jwt-spring-security-demo HOT 4 CLOSED

@mupi2015 i guess the UsernamePasswordAuthenticationFilter is executed which takes care of authenticating username and password.

when this authenticationTokenFilterBean is executed it wont find any authToken on the very first request of login... and will skip to the next filter in chain which happens to be UsernamePasswordAuthenticationFilter

find this code below in WebSecurityConfig file.
httpSecurity.addFilterBefore(authenticationTokenFilterBean(), UsernamePasswordAuthenticationFilter.class);

from jwt-spring-security-demo.

Sorry for answering that late! The BadCredentialsException is thrown in org.springframework.security.authentication.dao.DaoAuthenticationProvider#additionalAuthenticationChecks.

This method is called indirectly in the method org.zerhusen.security.controller.AuthenticationRestController#createAuthenticationToken where i call authenticationManager.authenticate(). I just autowire the AuthenticationManager in the AuthenticationRestController and I get the default implementation from Spring.

So to speak I just use the standard Spring Security authentication.

from jwt-spring-security-demo.

by any chance is it getting validated from WebSecurityConfiguration.configureAuthentication and Then authenticationManager.authenticate from the controller?

from jwt-spring-security-demo.

thanks, @alphabytes, yes it makes sense now. After checking this documentation i got a little idea.

from jwt-spring-security-demo.