spring-security
spring-security copied to clipboard
API key authentication implementation
See GH-17563
Adds API key authentication support. Key components include the following:
-
ApiKeiis a data model consisting of ID and secret parts.ApiKeyprovides method for generating new instance randomly; -
ApiKeyDigesthandles hashing API key secret part and comparing secret with existing hash. This component closely resemblesPasswordEncoderfunctionality; -
ApiKeySearchServiceallows framework user to hook into the API key authentication lifecycle. This component closely resemblesUserDetailsServicefunctionality; -
ApiKeyAuthenticationProviderhandles API key authentication aspects; -
ApiKeyAuthenticationFilterintercepts incoming requests and hands control over toAuthenticationManagerthe same way other similar filters do (e.g.,BasicAuthenticationFilter).
This is a work-in-progress, it's far from finish (no reactive stack support, no tests, etc.), but it catches the way it should work from my perspective.